nix-config

skill
Security Audit
Pass
Health Pass
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 456 GitHub stars
Code Pass
  • Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose: This is a personal collection of Nix system configurations. It allows users to manage, reproduce, and deploy their system setups using the Nix package manager.

Security Assessment: This configuration repository has a Low overall security risk. The automated code scan reviewed 12 files and found no dangerous patterns or hardcoded secrets. It does not request any dangerous system permissions. While Nix configurations inherently execute shell commands or scripts to build and provision environments, this repository appears to be standard, safe system declarations without malicious intent.

Quality Assessment: The project is highly active and well-maintained, with its most recent code push occurring just today. It benefits from a solid level of community trust, as evidenced by 456 GitHub stars. Additionally, it is properly open-sourced under the MIT license, meaning it meets standard compliance and sharing requirements. The only minor drawback is the lack of a README file, which means there is no immediate documentation for onboarding or usage guidelines.

Verdict: Safe to use.
SUMMARY

My Nix system configs!

README.md

My Nix Configs

Build Nix envs

This repo contains my Nix configs for macOS and Linux and by extension, configuration for most tools/programs I use, at least in the terminal.

I'm continuously tweaking/improving my setup, trying to find ways to make more of my configuration declarative, and I like experimenting with bleeding edge updates/features, so this repo sees a lot of changes. I do try to ensure that master always builds and doesn't have any bad bugs (at least in my workflow), and keep the code fairly well documented.

Feel free to file an issue or start a discussion if you find a bug, or think something is broken, or think I'm doing something in a dumb/clumsy way and have a suggestion for a more elegant alternative, or try to crib something from my config but just can't get it working, or are looking at my config and think to yourself "does this guy know about X, cause I bet he'd be into it", or have some other type of feedback/comment. (Issues, are better for things that are actually issues, while discussions are better for ideas, questions, etc.)

I make no promises that I'll respond quickly, or fix the bug (especially if I'm not experiencing it), or whatever, but you definitely shouldn't feel like you're imposing in any way, and I probably will respond within a few days.

Below, I've highlighted stuff that I'm particularly happy with or think others might find helpful/useful.

Highlights

In no particular order:

  • Flakes!
    • All external dependencies managed through flakes for easy updating.
    • Outputs for nix-darwin macOS system configurations (using home-manager as a nix-darwin module) and a home-manager user configuration for Linux.
    • A function to simplify making nix-darwin system configurations (with home-manager integration), lib.mkDarwinSystem.
    • darwinModules output for nix-darwin modules with additional functionality and prepackaged configuration, including:
      • users-primaryUser that provides users.primaryUsers.{username,fullName,email,nixConfigDirectory} options, which allows specifying this information one time by setting these options and then referencing their values when setting other options.
    • homeManagerModules output for home-manager modules with additional functionality and prepackaged configuration, including:
      • home-user-info, that provides the same options as the my nix-darwin module users-primaryUsers above under home.user-info. See examples of it in use in home/git.nix.
      • colors module for declarative colorscheme definitions using OkLCH color math. Schemes define shared monotones and accents; the module auto-generates both light/dark polarities with correct ANSI mapping, bright variants, and per-app themes (Ghostty, Fish, kitty, bat, yazi). See home/colors.nix for usage.
      • malo-git-aliases
      • malo-gh-aliases
      • programs-starship-extras that provides programs.starship.extras.presets.<name> options for easily enabling Starship presets.
    • Support for non-flake compatible versions of Nix and legacy workflows through flake-compat:
      • default.nix, allows traditional Nix commands like nix-build to operate on the flake inputs/outputs.
  • Support for Macs with Apple Silicon including ability to easily overlay in x86 version of packages, when they don't build on ARM. Search pkgs-x86 in flake.nix and see nix.settings.extra-platforms in darwin/bootstrap.nix for details.
  • A GitHub workflow that builds the my macOS system nix-darwin config and home-manager Linux user config, and updates a Cachix cache. Also, once a week it updates all the flake inputs before building, and if the build succeeds, it commits the updated flake.lock file.
  • Git config with a bunch of handy aliases and better diffs using delta.
  • Unified colorscheme (based on OK Solar, itself a perceptually uniform redesign of Solarized) with automatic light/dark switching across Ghostty, Fish, bat, yazi, and other tools. Fish uses its native .theme file format with OSC-based theme switching — no manual toggle needed.
  • A nice shell prompt config for Fish using Starship.
  • Claude Code config with live-editable configuration.
    • Uses 1MCP to aggregate MCP servers via LaunchAgent
    • Symlinks config files to configs/claude/ for editing without rebuild
    • Global context, settings, and permissions managed declaratively

Reviews (0)

No results found