메뉴
NixOS Operations: Multi-Host Architecture, Deployment & Tooling
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Read, write, search and reorganise notes in the local Obsidian vaults. Use for anything touching ~/Documents/R3_vault, ~/Documents/Synechron or ~/Documents/My_Obsidian_Vault/Privat — finding notes, adding or editing content, renaming/moving notes without breaking links, and daily notes. Triggers on "my notes", "my vault", "Obsidian", "write this up in my notes", or a request to look something up in personal documentation.
Manage DNS records for the user's GoDaddy-registered domains. Add/upsert, delete, list, look up specific records, verify a stored record matches an expected value, and check public DNS resolution via dig. Triggers on `/dns`, requests to add/change/check A, AAAA, CNAME, MX, TXT, NS, SRV records on the user's domains, debugging DNS propagation, or auditing what's set at GoDaddy vs what's resolving in the wild.
Operate Google Workspace from the terminal via the `gog` CLI (gogcli). Use for checking and replying to Gmail, managing Google Tasks, reading and creating Calendar events, Google Chat (spaces/DMs/messages), Meet spaces, Contacts, Drive/Docs/Sheets, and more. Triggers on `/gog`, `/gog mail`, `/gog tasks`, `/gog events`, `/gog chat`, `/gog meet`, or any request to check/read/reply/send email, list or add tasks, see today's agenda, or message someone on Chat for the user's Google account.
Agenix Skill
cargo2nix Skill
COSMIC Desktop Environment Skill
| name | nixos-ops |
| version | 1 |
| description | NixOS Operations: Multi-Host Architecture, Deployment & Tooling |
Operator's Manual for this NixOS Infrastructure
This skill covers the operational aspects of managing this multi-host NixOS repository: architecture, deployment workflows, testing strategies, and tooling integration.
flake.nix)This repository uses a unified multi-host flake architecture.
flake.nix (nixpkgs, home-manager, stylix, agenix, etc.).nixosConfigurations for all hosts.makeNixosSystem: A helper function in flake.nix that standardizes host creation:
specialArgs: host, username, sharedVariables, hardwareProfiles.Hosts are defined in hosts/<hostname>/:
hosts/
├── common/ # Shared configurations
│ ├── hardware-profiles/ # GPU/CPU specific configs
│ └── shared-variables.nix
├── p620/ # Host: Primary Workstation
│ ├── configuration.nix # Entry point
│ ├── hardware-configuration.nix
│ └── variables.nix # Host-specific variables
├── razer/ # Host: Laptop
└── templates/ # Templates for new hosts
Modules are organized by function in modules/:
core/: System foundations (boot, locale, nix settings).desktop/: UI environments (GNOME, Hyprland, Cosmic).services/: System services (docker, nginx, tailscale).features/: High-level capability flags (e.g., features.gaming.enable).Primary Tool: just
This project relies heavily on Justfile to abstract complex commands.
# Standard deploy (uses nh for speed)
just deploy
# Update system (without flake update)
just update
Specific targets are defined for each host to handle remote flags (--target-host, --build-host):
# Deploy to specific hosts
just p620
just razer
just p510
just samsung # Special handling for network
To update flake.lock (nixpkgs versions) and deploy:
# Update inputs and deploy locally
just update-flake
# Interactive workflow (Preview -> Review -> Deploy)
just update-workflow <host>
If tests fail but deployment is critical:
# Skip all checks and force deploy
just emergency-deploy <host>
Always validate before deploying to production hosts.
# Syntax check only
just check-syntax
# Fast validation (eval only)
just check
# Build config without switching (ensure it compiles)
just test-host <host>
# Example: just test-host razer
# Run full suite (features, security, syntax)
just validate
# Test ALL hosts in parallel (heavy load!)
just test-all-parallel
Packages are managed via Overlays defined in flake.nix and pkgs/.
pkgs/<package-name>/default.nix.overlays list in flake.nix.just test-package <package-name>.# Search nixpkgs
nix search nixpkgs <query>
# Search installed packages
nix search . <query>
nh (Nix Helper)Used for local operations. Faster than nixos-rebuild.
nh os switch: Apply config.nh os test: Test config.nixos-rebuildUsed for remote operations.
nixos-rebuild switch --flake .#<host> --target-host <host>agenix (Secrets)See agenix skill.
just secrets: Interactive secret manager.just test-secrets: Verify decryption.just: Avoid running raw nixos-rebuild commands; use the recipes.just test-host <target> before just <target>.variables.nix in host directories for simple toggles instead of hardcoding.hosts/common/hardware-profiles instead of copy-pasting GPU config.just gc periodically to manage disk space.