Nix Flakes

NixOS is a Linux distribution built around the Nix package manager and Nixpkgs. It describes laptops or server fleets through declarative configuration, builds system changes before activation, and stores generations that can be used to roll back to earlier configurations. The Nix ecosystem emphasizes reproducible package builds, isolated dependencies, and upgrades that do not leave packages in an inconsistent state.

NixOS VPS is a starter NixOS configuration repository for deploying and managing an x86_64 VPS, originally targeting the Hostinger NixOS template. It uses a Nix flake and `just` recipes to bootstrap encrypted SOPS/age secrets, build the system locally or on a separate Linux builder, transfer the resulting closure over SSH, and activate it on the server. The configuration creates an administrative account, manages SSH access, and supports deploying Docker or Podman containers and systemd services through NixOS modules. Optional modules provide Tailscale access and locally managed Cloudflare Tunnel publishing. Secrets remain encrypted in the Git-backed repository and are decrypted on the VPS; the repository also documents multi-server configurations, macOS and ARM build setups, trusted-build considerations, and service deployment. It is distributed as source code under the repository's GitHub project; the configuration must be adapted when used with a provider or VPS template other than the documented Hostinger setup.

trynix is a browser-based environment for running packages from the historical Nixpkgs archive. It resolves a package and version through the nixpkgs-multiverse index, fetches its signed runtime closure from cache.nixos.org, and runs it in an x86_64 Linux virtual machine powered by QEMU compiled to WebAssembly. The browser decompresses the package archives into an in-memory filesystem shared with the guest over virtio-9p; the guest resumes from a migration snapshot rather than booting from scratch, then exposes the selected packages through shell commands. Environment state is encoded in the URL, including package selections, store paths, and additional binary caches. A GitHub Action can comment on pull requests with links that launch the store paths produced by a build, allowing reviewers to run branch builds in a browser. The project is MIT-licensed and can also be run locally with Nix.

headless is an agent skill and Nix flake for configuring Mac, Linux, and Windows machines over SSH without exposing the administrator password to the agent. It guides setup step by step: saving the password in a secret store, pinning the host key and adding an SSH key, configuring unattended operation and automatic sign-in after restart, enforcing key-only SSH, optionally joining Tailscale, and reading settings back after a restart to verify recovery. The repository provides scripts and configurations for Apple silicon Macs, NixOS and other Linux distributions, Windows 11, and Windows Server 2025, plus nix-darwin and NixOS modules and templates. It is distributed as an npx skills package and can also be consumed as a Nix flake; its automated workflows exercise the Mac, Linux, and Windows journeys over SSH and check that passwords do not appear in logs.

nix-graph is an interactive terminal user-interface viewer for Nix dependency graphs, written in pure Go with no dependencies beyond Nix at runtime. It runs `nix path-info` and renders a target's store-path closure as an expandable tree. The viewer supports sorting, filtering, NAR size, closure size, and added-size columns, and can inspect store paths, profiles, the current system, and derivation build-time graphs. Its reverse view flips the tree at a selected node to show which packages depend on it. It can be run directly with `nix run`, installed in a Nix profile or flake, or invoked as `nix-graph [path]`; the default path is `/run/current-system`.