nixconfigs

NixOS-based machine configurations for KittenConnect network infrastructure.

Tech Stack

• NixOS - Operating system
• Colmena - Fleet deployment
• Bird2 - BGP routing
• WireGuard - VPN tunnels
• SOPS + age - Secrets management
• Disko - Disk partitioning

Directory Structure

Path	Description
/systems/	Machine configs (routers, clients, servers, stonkmembers)
/modules/	Reusable NixOS modules
/modules/system/kitten/connect/	KittenConnect modules (bird2, disko, wireguard, firewall)
/lib/	Custom library functions (network, peers)
/ci/	GitHub Actions, Colmena configs
/.secrets/	SOPS-encrypted secrets per host
/npins/	Dependency pins (nixpkgs, colmena)

Key Commands

nix develop                    # Enter dev shell
colmena deploy --on $HOST      # Deploy to host
nixos-rebuild switch --flake .#HOST  # Rebuild locally

Secrets

Files in /.secrets/*.yaml are SOPS-encrypted. Use sops CLI to edit:

sops .secrets/hostname.yaml

Never commit decrypted secrets.

Conventions

• Uses npins (not flakes) for dependency management
• Secrets use per-host age keys (see .sops.yaml)
• Modules follow standard NixOS module conventions