nix-config

Create and modify NixOS and Home-Manager modules

Hardens systemd services against security issues using sandboxing, capability restriction, and syscall filtering. Use when creating or modifying systemd services, writing NixOS modules with systemd.services, reviewing service security, or whenever a serviceConfig block is involved. Ensures services follow defense-in-depth principles with minimal privilege.

Write Nix code using repo conventions

Write and review Conventional Commits commit messages (v1.0.0) for semantic versioning and changelogs. Use when drafting git commit messages, PR titles, release notes, or enforcing conventional commit format like `type(scope): subject`, `BREAKING CHANGE`, footers, and `revert`.

Manages version control with Jujutsu (jj), including rebasing, conflict resolution, and Git interop. Use when tracking changes, navigating history, squashing/splitting commits, or pushing to Git remotes.

Manage background jobs, capture command output, and handle session multiplexing. Use when running long commands, capturing output from detached processes, or managing concurrent tasks in headless environments.

Create terminal screenshots and GIFs with VHS tape files. Use when automating terminal recordings, capturing TUI screenshots, or generating demo GIFs.

Writes and maintains project documentation based on code changes and implementations

Process structured data in pipelines, filter tables, transform JSON/CSV/YAML, and define custom commands. Use when scripting with typed parameters or working with tabular data.

Build and evaluate NixOS and Home-Manager configurations

Troubleshoot Nix evaluation and build errors

Add and configure new NixOS host machines

Audits configurations for security issues, secrets handling, and hardening

Create custom packages and overlays

Navigate nix-config repository layout and find files

Manage encrypted secrets with sops-nix

Test changes using module-graph and build commands

Add and configure new Home-Manager users