All recipes

Each recipe is a complete, tested flake template. Read the page, then copy the template and change it. They go from simple to advanced: start at the top.

Users and homes home-manager inside NixOS and as a standalone home, from one aspect.

Environments prod and staging: hosts grouped by where they run, settings that cascade, and access from groups.

nix-darwin machines NixOS hosts and macs in one fleet. Aspects write `os` once; each platform forwards it.

Guests inside hosts Containers or VMs as scopes under their host. A guest's NixOS goes into the host, never the other way.

Roles from data A role is an aspect whose `at` tests a fact. No host file lists its roles.

Secrets as data Secrets are instances of a data kind. Hosts get exactly the secrets that name them, as refs.

Generated files flake.nix by flake-file, README.md and the CI workflow by sini/files: written from fleet data, and checked in CI.

Services and roles Service instances as data: each machine gets one member scope per role, and members exchange data.

osConfig in home-manager A home-manager module reads its host's NixOS config, nested in NixOS or as a standalone home.