NixOS Configuration

Authoring system configuration.

Contents

• configuration.nix — Main system configuration
• hardware-configuration.nix — Hardware scan output
• Imports and Profiles — Modular config layout
• Networking — Network options
• Overlay networks — VPN/overlay fabric for builders, deploy, private caches
• Users and Groups — User management
• Enterprise identity — LDAP / AD / SSSD patterns on NixOS

• Secrets Strategies — Handling secrets on NixOS

• Partitioning and Bootloaders — Disk and bootloader setup

• Impermanence — Ephemeral root with declared persistence
• Secure Boot and Lanzaboote — UEFI Secure Boot via Lanzaboote
• TPM and measured boot — TPM PCR policy unlock (Lanzaboote / Clevis notes)
• nixos-hardware — Hardware quirk profiles for common machines
• Firmware and microcode — Redistributable firmware and CPU microcode
• ZFS and Btrfs — Declarative mounts, scrub, native encryption notes
• Disko recipes — Common disko layout patterns and templates
• Specialisations — Extra boot/runtime system variants in one generation