SystemNix

What You Get

Quick Start

Prerequisites

Installation

# Install Nix (Determinate Systems installer)
curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix | sh -s -- install
# Clone and apply configuration
git clone https://github.com/LarsArtmann/SystemNix.git ~/projects/SystemNix
cd ~/projects/SystemNix
just setup # Complete setup
just switch # Apply configuration

Target Systems

Architecture

SystemNix/
├── flake.nix # Main entry point with flake-parts
├── justfile # Task runner for all operations
├── modules/nixos/services/ # 39 NixOS service modules (auto-discovered, ~37 enabled)
├── pkgs/ # 5 custom packages (jscpd, govalid, netwatch, openaudible, aw-watcher-utilization)
├── overlays/ # 25 overlay packages (17 shared + 8 Linux-only) via mkPackageOverlay
├── lib/ # 8 files exporting 13+ helpers (harden, ports, mkDockerServiceFactory, ...)
├── platforms/
│ ├── common/ # Shared across platforms (~80% of config)
│ │ ├── home-base.nix # Home Manager base (13 program modules)
│ │ ├── programs/ # Fish, Zsh, Bash, Starship, Git, tmux, ...
│ │ ├── packages/ # Cross-platform packages & fonts
│ │ └── core/ # Nix daemon settings
│ ├── darwin/ # macOS-specific (nix-darwin)
│ │ ├── default.nix # System config
│ │ ├── home.nix # User config
│ │ ├── services/ # LaunchAgents (ActivityWatch, Crush updates)
│ │ └── programs/ # Chrome policies, shell aliases
│ └── nixos/ # NixOS-specific
│ ├── system/ # Boot, networking, BTRFS snapshots, DNS blocker
│ ├── desktop/ # Niri, Waybar, SDDM, AI stack, security hardening
│ ├── hardware/ # AMD GPU/NPU, Bluetooth, hardware config
│ ├── programs/ # Rofi, swaylock, wlogout, Yazi, Zellij, Chromium
│ └── users/ # Home Manager user config
├── scripts/ # 29 operational scripts (26 shell + 3 Python)
└── docs/ # Architecture decisions (8 ADRs), status reports, troubleshooting

NixOS Services (evo-x2)

DNS Blocking

NixOS Desktop

NixOS Hardware (evo-x2)

Essential Commands

# Core workflow
just setup # Initial setup (run once after clone)
just switch # Apply configuration changes
just update # Update flake inputs and packages
just update-nix # Self-update Nix to latest version
just test # Validate configuration (full build)
just test-fast # Syntax-only validation (fast)
just check # System status, git, disk usage
# Quality
just format # Format code with treefmt + alejandra
just health # System health check
just pre-commit-install # Install pre-commit hooks
just pre-commit-run # Run all hooks on all files
# Maintenance
just clean # Comprehensive cleanup (Nix, caches, temp, Docker)
just rollback # Revert to previous generation
# NixOS services
just dns-diagnostics # Full DNS diagnostics
just immich-status # Check Immich service status
just immich-backup # Run database backup
just forgejo-sync-repos # Sync GitHub repos to Forgejo
just hermes-status # Check Hermes gateway status
just manifest-status # Check Manifest LLM router status
just session-status # Check niri session save state
just cam-status # Check EMEET PIXY webcam state
# Taskwarrior
just task-list # Show pending tasks
just task-sync # Sync with TaskChampion server
just task-backup # Export all tasks as JSON

Cross-Platform Programs

Flake Inputs

CI/CD

Pre-commit Hooks

Documentation

Troubleshooting

Build Errors

just test-fast # Quick syntax validation
just clean && just switch # Clean and rebuild

GPG Not Working

nix profile add nixpkgs#gnupg
# Path: ~/.nix-profile/bin/gpg

Package Not Found

nix search nixpkgs <package-name>

DNS Issues (NixOS)

just dns-diagnostics # Full DNS diagnostics
just dns-restart # Restart DNS services
just dns-test # Test resolution and blocking

Contributing

License