multi-host nix flake
  • Nix 99.3%
  • Just 0.7%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
ky 0f4c90213c
Some checks failed
Check Formatting / check (push) Has been cancelled
Evaluate Configurations / eval-kura (push) Has been cancelled
Evaluate Configurations / eval-yoru (push) Has been cancelled
Evaluate Configurations / eval-navi (push) Has been cancelled
Evaluate Configurations / eval-aku (push) Has been cancelled
Lint / lint (push) Has been cancelled
ci: fix statix, deadnix, and add aku evaluation step
2026-09-18 09:49:40 -04:00
.github/workflows ci: fix statix, deadnix, and add aku evaluation step 2026-09-18 09:49:40 -04:00
docs chore: rename host snowbox to kura across configurations and docs 2026-08-28 21:52:07 -04:00
home ci: fix statix, deadnix, and add aku evaluation step 2026-09-18 09:49:40 -04:00
hosts feat: add research toolset, devshells, and aku VM host 2026-09-18 09:45:09 -04:00
lib feat: add research toolset, devshells, and aku VM host 2026-09-18 09:45:09 -04:00
modules ci: fix statix, deadnix, and add aku evaluation step 2026-09-18 09:49:40 -04:00
pkgs feat: add research toolset, devshells, and aku VM host 2026-09-18 09:45:09 -04:00
secrets feat: multi-host flake overhaul for snowbox and yoru 2026-08-28 13:57:04 -04:00
.gitignore feat: multi-host flake overhaul for snowbox and yoru 2026-08-28 13:57:04 -04:00
.gitleaks.toml feat: multi-host flake overhaul for snowbox and yoru 2026-08-28 13:57:04 -04:00
.sops.yaml chore: rename host snowbox to kura across configurations and docs 2026-08-28 21:52:07 -04:00
configuration.nix chore: rename host snowbox to kura across configurations and docs 2026-08-28 21:52:07 -04:00
flake.lock flake: pin mac-app-util to our nixpkgs; add lgogdownloader and speedtest-go 2026-09-17 00:03:10 -04:00
flake.nix ci: fix statix, deadnix, and add aku evaluation step 2026-09-18 09:49:40 -04:00
justfile feat: multi-host flake overhaul for snowbox and yoru 2026-08-28 13:57:04 -04:00
LICENSE feat: multi-host flake overhaul for snowbox and yoru 2026-08-28 13:57:04 -04:00
README.md feat: add research toolset, devshells, and aku VM host 2026-09-18 09:45:09 -04:00
statix.toml feat: multi-host flake overhaul for snowbox and yoru 2026-08-28 13:57:04 -04:00
treefmt.nix feat: multi-host flake overhaul for snowbox and yoru 2026-08-28 13:57:04 -04:00

nixfiles

personal nixos and nix-darwin configurations managed via flakes and home-manager.

hosts

  • yoru: macbook pro (aarch64-darwin) - primary workstation & dev environment
  • kura: nixos server (x86_64-linux) - home/internal services
  • navi: nixos desktop (x86_64-linux) - custom kernel, VFIO passthrough & fuzzing
  • aku: nixos guest VM (aarch64-linux) - UTM/Apple Virtualization security arsenal & linux toolbench

structure

  • hosts/: host-specific configurations (yoru, kura, navi, aku)
  • modules/: shared, nixos, darwin, and vm system modules
  • home/: home-manager user environments and dotfiles
  • lib/: system generation helpers and categorized toolset.nix
  • pkgs/: custom pinned derivations (e.g., palera1n)

devshells

Categorized devShells defined via lib/toolset.nix (RedNix-inspired):

  • nix develop .#all: full tool suite filtered for current platform
  • nix develop .#re: reverse engineering & binary analysis (ghidra, radare2, rizin, binwalk, jadx)
  • nix develop .#ios: iOS research & bootchain (ipsw, ldid, frida-tools, palera1n)
  • nix develop .#android: mobile API testing (adb, apktool, apksigner, apkid, apkleaks, jadx, scrcpy)
  • nix develop .#kernel: kernel development & navigation (dtc, qemu, llvm, ctags, cscope, bear)
  • nix develop .#offsec: penetration testing & security tools (nmap, ffuf, certipy, impacket, hashcat)

usage

via just

just switch   # rebuilds and switches system config
just build    # builds system config
just check    # run flake checks
just fmt      # format nix files
just update   # update flake inputs

direct

# macos (yoru)
sudo darwin-rebuild switch --flake .#yoru

# nixos (kura / navi / aku)
sudo nixos-rebuild switch --flake .#<hostname>