History

Geir Okkenhaug Jerstad 77e6b9a501 feat: Implement two-key SSH management strategy - Add modules/security/ssh-keys.nix for centralized SSH key management - Generate role-specific SSH keys with geir@geokkjer.eu email: - Admin key (geir@geokkjer.eu-admin) for sma user server access - Development key (geir@geokkjer.eu-dev) for geir user and git services - Update SSH client config with role-based host patterns - Configure users/geir.nix and users/sma.nix with appropriate key access - Add SSH key setup to both machine configurations - Create scripts/setup-ssh-keys.sh for key generation automation - Update plan.md with completed SSH security implementation Security benefits: - Principle of least privilege (separate admin vs dev access) - Limited blast radius if keys are compromised - Clear usage patterns: ssh admin-sleeper vs ssh geir@sleeper-service.home - Maintains compatibility with existing services during transition		2025-06-05 16:25:33 +02:00
..
common	feat: System update and direnv fixes	2025-06-05 09:32:58 +02:00
desktop	feat: initial NixOS home lab infrastructure setup	2025-06-04 16:10:13 +02:00
development	feat: System update and direnv fixes	2025-06-05 09:32:58 +02:00
hardware	feat: initial NixOS home lab infrastructure setup	2025-06-04 16:10:13 +02:00
network	feat: Complete sleeper-service systemd-networkd configuration	2025-06-05 15:44:07 +02:00
security	feat: Implement two-key SSH management strategy	2025-06-05 16:25:33 +02:00
system	Restructure networking configuration to per-machine modules	2025-06-05 14:54:27 +02:00
users	feat: Implement two-key SSH management strategy	2025-06-05 16:25:33 +02:00
virtualization	feat: initial NixOS home lab infrastructure setup	2025-06-04 16:10:13 +02:00
README.md	feat: initial NixOS home lab infrastructure setup	2025-06-04 16:10:13 +02:00

README.md

NixOS Modules Directory Structure

This directory contains reusable NixOS modules organized by functional domain for the Home-lab infrastructure.

Directory Organization

`common/`

Core modules shared across all machines in the home lab:

base.nix - Modern CLI tools, aliases, and essential packages
tty.nix - Console configuration and theming
nix.nix - Nix/flakes configuration and optimization settings
ssh.nix - SSH server and security configurations
networking.nix - Basic networking and firewall settings

`desktop/`

Desktop environment configurations for workstation machines:

gnome.nix - GNOME desktop environment setup
cosmic.nix - System76 COSMIC desktop configuration
sway.nix - Sway window manager and Wayland setup
fonts.nix - Font packages and configurations
audio.nix - PipeWire/audio system setup

`development/`

Development tools and environments:

editors.nix - Text editors (Emacs, Neovim, VSCode)
languages.nix - Programming languages and runtimes
tools.nix - Development utilities and CLI tools
containers.nix - Development container tools
git.nix - Git configuration and tools

`virtualization/`

Virtualization and containerization:

podman.nix - Podman container runtime
libvirt.nix - KVM/QEMU virtualization
incus.nix - System container management
docker.nix - Docker runtime (if needed)

`services/`

Network services primarily for SleeperService file server:

nfs.nix - Network File System server
samba.nix - SMB/CIFS file sharing
backup.nix - Automated backup services
monitoring.nix - System monitoring and alerting
storage.nix - ZFS and storage management
media.nix - Media server services (Jellyfin/Plex)

`users/`

User management and shared user configurations:

common.nix - Shared user settings across machines
groups.nix - System groups and permissions
security.nix - User security policies

Usage

Modules are imported in machine configurations like:

imports = [
  ../../modules/common/base.nix
  ../../modules/desktop/gnome.nix
  ../../modules/virtualization/podman.nix
];

Design Philosophy

Modular: Each module has a single, clear responsibility
Reusable: Modules work across different machine types
Composable: Mix and match modules for different machine roles
Documented: Each module includes usage examples and options
Testable: Modules can be tested independently