No description
Find a file
2026-02-16 22:39:22 -08:00
modules refactor: implement intermediate mySecrets options 2026-02-16 21:32:30 -08:00
.gitignore refactor: move secrets.nix to root and removal secrets dir 2026-02-16 21:31:28 -08:00
configuration.nix refactor: implement intermediate mySecrets options 2026-02-16 21:32:30 -08:00
disk-config.nix initial commit 2026-02-16 21:29:21 -08:00
flake.lock initial commit 2026-02-16 21:29:21 -08:00
flake.nix initial commit 2026-02-16 21:29:21 -08:00
README.md docs: improve readme with domains and key gen info 2026-02-16 22:39:22 -08:00
secrets.nix.example refactor: implement intermediate mySecrets options 2026-02-16 21:32:30 -08:00

extremist software

nixos config for the hetzner vps.

services:

  • forgejo (git.extremist.software)
  • stalwart (mail.extremist.software)
  • searx (search.extremist.software)
  • conduit (matrix.extremist.software)
  • minecraft (extremist.software)
  • caddy (reverse proxy)
  • grafana/prometheus (status.extremist.software)

deploy: nix run github:nix-community/nixos-anywhere -- --flake .#extremist-software --impure root@<ip>

secrets:

  1. copy secrets.nix.example to secrets.nix.
  2. fill in values (generate random keys for searx/tailscale).
  3. tailscaleKey must be a reusable key.

repo uses impure build to load secrets.nix directly. no encrypted secrets in git.