Menü
NixOS Operations: Multi-Host Architecture, Deployment & Tooling
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Basierend auf der SOC-Berufsklassifikation
Read, write, search and reorganise notes in the local Obsidian vaults. Use for anything touching ~/Documents/R3_vault, ~/Documents/Synechron or ~/Documents/My_Obsidian_Vault/Privat — finding notes, adding or editing content, renaming/moving notes without breaking links, and daily notes. Triggers on "my notes", "my vault", "Obsidian", "write this up in my notes", or a request to look something up in personal documentation.
Manage DNS records for the user's GoDaddy-registered domains. Add/upsert, delete, list, look up specific records, verify a stored record matches an expected value, and check public DNS resolution via dig. Triggers on `/dns`, requests to add/change/check A, AAAA, CNAME, MX, TXT, NS, SRV records on the user's domains, debugging DNS propagation, or auditing what's set at GoDaddy vs what's resolving in the wild.
Operate Google Workspace from the terminal via the `gog` CLI (gogcli). Use for checking and replying to Gmail, managing Google Tasks, reading and creating Calendar events, Google Chat (spaces/DMs/messages), Meet spaces, Contacts, Drive/Docs/Sheets, and more. Triggers on `/gog`, `/gog mail`, `/gog tasks`, `/gog events`, `/gog chat`, `/gog meet`, or any request to check/read/reply/send email, list or add tasks, see today's agenda, or message someone on Chat for the user's Google account.
Agenix Skill
cargo2nix Skill
COSMIC Desktop Environment Skill
| name | nixos-ops |
| version | 1 |
| description | NixOS Operations: Multi-Host Architecture, Deployment & Tooling |
Operator's Manual for this NixOS Infrastructure
This skill covers the operational aspects of managing this multi-host NixOS repository: architecture, deployment workflows, testing strategies, and tooling integration.
flake.nix)This repository uses a unified multi-host flake architecture.
flake.nix (nixpkgs, home-manager, stylix, agenix, etc.).nixosConfigurations for all hosts.makeNixosSystem: A helper function in flake.nix that standardizes host creation:
specialArgs: host, username, sharedVariables, hardwareProfiles.Hosts are defined in hosts/<hostname>/:
hosts/
├── common/ # Shared configurations
│ ├── hardware-profiles/ # GPU/CPU specific configs
│ └── shared-variables.nix
├── p620/ # Host: Primary Workstation
│ ├── configuration.nix # Entry point
│ ├── hardware-configuration.nix
│ └── variables.nix # Host-specific variables
├── razer/ # Host: Laptop
└── templates/ # Templates for new hosts
Modules are organized by function in modules/:
core/: System foundations (boot, locale, nix settings).desktop/: UI environments (GNOME, Hyprland, Cosmic).services/: System services (docker, nginx, tailscale).features/: High-level capability flags (e.g., features.gaming.enable).Primary Tool: just
This project relies heavily on Justfile to abstract complex commands.
# Standard deploy (uses nh for speed)
just deploy
# Update system (without flake update)
just update
Specific targets are defined for each host to handle remote flags (--target-host, --build-host):
# Deploy to specific hosts
just p620
just razer
just p510
just samsung # Special handling for network
To update flake.lock (nixpkgs versions) and deploy:
# Update inputs and deploy locally
just update-flake
# Interactive workflow (Preview -> Review -> Deploy)
just update-workflow <host>
If tests fail but deployment is critical:
# Skip all checks and force deploy
just emergency-deploy <host>
Always validate before deploying to production hosts.
# Syntax check only
just check-syntax
# Fast validation (eval only)
just check
# Build config without switching (ensure it compiles)
just test-host <host>
# Example: just test-host razer
# Run full suite (features, security, syntax)
just validate
# Test ALL hosts in parallel (heavy load!)
just test-all-parallel
Packages are managed via Overlays defined in flake.nix and pkgs/.
pkgs/<package-name>/default.nix.overlays list in flake.nix.just test-package <package-name>.# Search nixpkgs
nix search nixpkgs <query>
# Search installed packages
nix search . <query>
nh (Nix Helper)Used for local operations. Faster than nixos-rebuild.
nh os switch: Apply config.nh os test: Test config.nixos-rebuildUsed for remote operations.
nixos-rebuild switch --flake .#<host> --target-host <host>agenix (Secrets)See agenix skill.
just secrets: Interactive secret manager.just test-secrets: Verify decryption.just: Avoid running raw nixos-rebuild commands; use the recipes.just test-host <target> before just <target>.variables.nix in host directories for simple toggles instead of hardcoding.hosts/common/hardware-profiles instead of copy-pasting GPU config.just gc periodically to manage disk space.