mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:36 +01:00
ryan4yin | 二花
e8e9691f2d
* chore(nix): update nixpkgs to e62746b and fix 26.11 breakage Bump nixpkgs to e62746b and preservation to 00be7f7, then adapt to the removals and renamed options in the new revision: drop the removed boot.initrd.systemd.enable settings, trim the stale emSign CA blacklist on Linux while keeping it for the older Darwin input, and migrate Avahi publishing to settings.publish. Work around sunshine still setting the legacy Avahi options and keep dsh-nu on its tested Nushell 0.115.1. Patch NUR dsh's pnpm call to pass nodejs = null, and update pyclipsync for the stdenv.hostPlatform.system rename. * chore(nix): refresh flake inputs for 26.11 - update nixpkgs-darwin to the same e62746b revision as nixpkgs - make dsh-nu follow main nixpkgs and patch its testedWith manifest for the resolved Nushell - refresh floating inputs; update lanzaboote, tuios, and ponytail - drop the nixpkgs-2505 and rust-overlay workarounds - keep pyclipsync on main and simplify the cross-platform CA blacklist - adopt home-manager's Nushell loadSessionVariables default * fix(gitea): use ROOT_URL for nixpkgs 26.11 nixpkgs removed the legacy settings.server.DOMAIN option; the existing ROOT_URL already carries the public URL. * chore(nix): update dsh-nu to 0.7.0 Assisted-by: DeepSeek Harness (deepseek-flash)
236 lines
8.9 KiB
Nix
236 lines
8.9 KiB
Nix
{
|
|
description = "Ryan Yin's nix configuration for both NixOS & macOS";
|
|
|
|
##################################################################################################################
|
|
#
|
|
# Want to know Nix in details? Looking for a beginner-friendly tutorial?
|
|
# Check out https://github.com/ryan4yin/nixos-and-flakes-book !
|
|
#
|
|
##################################################################################################################
|
|
|
|
outputs = inputs: import ./outputs inputs;
|
|
|
|
# This is the standard format for flake.nix. `inputs` are the dependencies of the flake,
|
|
# Each item in `inputs` will be passed as a parameter to the `outputs` function after being pulled and built.
|
|
inputs = {
|
|
# There are many ways to reference flake inputs. The most widely used is github:owner/name/reference,
|
|
# which represents the GitHub repository URL + branch/commit-id/tag.
|
|
|
|
# Official NixOS package source, using nixos's unstable branch by default
|
|
# Find git commit hash with build status here(3 jobs per day):
|
|
# https://hydra.nixos.org/jobset/nixpkgs/unstable
|
|
# update via nix flake update nixpkgs --override-input nixpkgs github:NixOS/nixpkgs/<commit-hash>
|
|
nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
|
|
# Pinned to release tag v2.4.2 (not a branch); bump deliberately when needed.
|
|
fcitx5-vinput = {
|
|
url = "github:xifan2333/fcitx5-vinput/v2.4.2";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
nixpkgs-stable.url = "github:nixos/nixpkgs/nixos-26.05";
|
|
|
|
# ryan4yin/nixpkgs fork for the `.agents/skills/nixpkgs-patched` workflow. It
|
|
# currently carries no patches (see WORKAROUNDS.md), but `pkgs-patched` is
|
|
# wired in outputs/default.nix so a temporary carry needs no flake edit.
|
|
nixpkgs-patched.url = "github:ryan4yin/nixpkgs/nixos-unstable-patched";
|
|
# get some latest packages from the master branch
|
|
nixpkgs-master.url = "github:nixos/nixpkgs/master";
|
|
# ryan4yin/nixpkgs branch carrying NixOS/nixpkgs#570230 (the Intel NPU
|
|
# compiler and the driver change that loads it). Only aquamarine consumes it,
|
|
# through `pkgs-npu`; drop it once the PR merges.
|
|
nixpkgs-npu.url = "github:ryan4yin/nixpkgs/openvino-npu-compiler";
|
|
# NixOS MicroVMs -- run the VMs directly on the hosts, replacing the former KubeVirt
|
|
microvm = {
|
|
url = "github:microvm-nix/microvm.nix";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
# for macos
|
|
# nixpkgs-darwin.url = "github:nixos/nixpkgs/nixpkgs-26.05-darwin";
|
|
nixpkgs-darwin.url = "github:nixos/nixpkgs/nixpkgs-unstable";
|
|
nix-darwin = {
|
|
url = "github:lnl7/nix-darwin";
|
|
inputs.nixpkgs.follows = "nixpkgs-darwin";
|
|
};
|
|
|
|
# home-manager, used for managing user configuration
|
|
home-manager = {
|
|
url = "github:nix-community/home-manager/master";
|
|
# url = "github:nix-community/home-manager/release-26.05";
|
|
|
|
# The `follows` keyword in inputs is used for inheritance.
|
|
# Here, `inputs.nixpkgs` of home-manager is kept consistent with the `inputs.nixpkgs` of the current flake,
|
|
# to avoid problems caused by different versions of nixpkgs dependencies.
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
# https://github.com/catppuccin/nix
|
|
# main carries the rust-overlay-style deprecation fix for its vscode
|
|
# package (nodejs -> nodejs-slim).
|
|
catppuccin = {
|
|
url = "github:catppuccin/nix/main";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
lanzaboote = {
|
|
url = "github:nix-community/lanzaboote/v1.2.0";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
preservation = {
|
|
url = "github:nix-community/preservation";
|
|
};
|
|
|
|
# Remote deployment via SSH. Pinned to the same v0.5.0 that nixpkgs ships
|
|
# so the `colmenaHive` output we expose matches the CLI's schema.
|
|
colmena = {
|
|
url = "github:nix-community/colmena/v0.5.0";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
# Reuse the flake's own stable nixpkgs instead of colmena's pinned copy.
|
|
inputs.stable.follows = "nixpkgs-stable";
|
|
};
|
|
|
|
# secrets management
|
|
# Pinned to a release tag (not a branch) so `just up` cannot move it
|
|
# silently; bump deliberately when a new release is needed.
|
|
agenix = {
|
|
url = "github:ryantm/agenix/0.18.0";
|
|
# replaced with a type-safe reimplementation to get a better error message and less bugs.
|
|
# url = "github:ryan4yin/ragenix";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
# Reuse the flake's own nix-darwin / home-manager instead of agenix's
|
|
# pinned copies, collapsing duplicate lock nodes.
|
|
inputs.darwin.follows = "nix-darwin";
|
|
inputs.home-manager.follows = "home-manager";
|
|
};
|
|
|
|
disko = {
|
|
url = "github:nix-community/disko/v1.13.0";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
# add git hooks to format nix code before commit
|
|
pre-commit-hooks = {
|
|
url = "github:cachix/git-hooks.nix";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
haumea = {
|
|
url = "github:nix-community/haumea/v0.2.2";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
nixpak = {
|
|
url = "github:nixpak/nixpak";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
# Pinned nixpkgs for Blender (5.2 LTS + CUDA/OptiX). Keeping it on a fixed
|
|
# rev stops `just up` from re-bumping this input and triggering a full
|
|
# Blender/CUDA source rebuild; bump the rev deliberately when needed.
|
|
nixpkgs-blender.url = "github:nixos/nixpkgs/4b8338e3113dc41bcf7695f56dc372107b7ff4c9";
|
|
|
|
nixos-apple-silicon = {
|
|
url = "github:nix-community/nixos-apple-silicon";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
# AI coding agents
|
|
llm-agents.url = "github:numtide/llm-agents.nix";
|
|
|
|
# terminal window manager / multiplexer; nixpkgs lags behind upstream,
|
|
# so track the upstream flake.
|
|
tuios = {
|
|
url = "github:Gaurav-Gosain/tuios/v0.11.1";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
# -------------- Gaming ---------------------
|
|
|
|
nix-gaming = {
|
|
url = "github:fufexan/nix-gaming";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
# x86/x86_64 emulation on 16K-page ARM64 (Apple Silicon). FEX cannot run
|
|
# natively with 16K pages, so this wraps FEX in a 4K-page muvm microVM and
|
|
# exposes an `x86pkgs` set plus Steam/Wine launchers. Used by shoukei; see
|
|
# hosts/12kingdoms-shoukei and WORKAROUNDS.md (WA-021).
|
|
#
|
|
# Pinned to our fork of rowanG077/nix-x86-on-aarch64 at the reviewed commit
|
|
# 5d69793a. To update, fetch upstream into the fork, review the new commits,
|
|
# then bump the rev here deliberately. Do not track the fork's default branch:
|
|
# a GitHub "Sync fork" fast-forward would pull unreviewed changes.
|
|
nix-x86-on-aarch64 = {
|
|
url = "github:ryan4yin/nix-x86-on-aarch64/5d69793a1c8b31d724fccd9b6acaa33587c923b3";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
######################## Some non-flake repositories #########################################
|
|
|
|
nu_scripts = {
|
|
url = "github:ryan4yin/nu_scripts";
|
|
flake = false;
|
|
};
|
|
|
|
# Global agent skills, linked into ~/.agents/skills by
|
|
# home/base/tui/agents/skills.nix. The ryan4yin forks track main; a fork sync
|
|
# pulls upstream changes, so review the lock diff before deploying it.
|
|
mattpocock-skills = {
|
|
url = "github:ryan4yin/mattpocock-skills";
|
|
flake = false;
|
|
};
|
|
i-have-adhd = {
|
|
url = "github:ryan4yin/i-have-adhd";
|
|
flake = false;
|
|
};
|
|
# Third-party skills pinned to a tag or commit; bump deliberately.
|
|
humanizer = {
|
|
url = "github:blader/humanizer/v3.1.0";
|
|
flake = false;
|
|
};
|
|
ponytail = {
|
|
url = "github:DietrichGebert/ponytail/v5.3.3";
|
|
flake = false;
|
|
};
|
|
######################## My own repositories #########################################
|
|
|
|
# my private secrets, it's a private repository, you need to replace it with your own.
|
|
# use ssh protocol to authenticate via ssh-agent/ssh-key, and shallow clone to save time
|
|
mysecrets = {
|
|
url = "git+ssh://git@github.com/ryan4yin/nix-secrets.git?shallow=1";
|
|
flake = false;
|
|
};
|
|
|
|
my-asahi-firmware = {
|
|
url = "git+ssh://git@github.com/ryan4yin/asahi-firmware.git?shallow=1";
|
|
flake = false;
|
|
};
|
|
|
|
# my wallpapers
|
|
wallpapers = {
|
|
url = "github:ryan4yin/wallpapers";
|
|
flake = false;
|
|
};
|
|
|
|
# Personal NUR packages.
|
|
nur-ryan4yin = {
|
|
url = "github:ryan4yin/nur-packages";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
# The Nushell-only shell bundle. Its flake builds the plugin from the
|
|
# repository, so a release needs only `nix flake update dsh-nu`.
|
|
dsh-nu = {
|
|
url = "github:ryan4yin/dsh-nu";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
# Wayland <-> X11 clipboard sync daemon for xwayland-satellite (niri).
|
|
# Track main while the upstream fix for pkgs.system has no release tag.
|
|
pyclipsync = {
|
|
url = "github:ryan4yin/pyclipsync";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
};
|
|
}
|