# nix-server

nix flake config! this is just used on my personal server at the moment

## users

this flake is built for a multi-user experience per host, enforced by [`modules/users.nix`](./modules/users.nix), and found in the `default.nix` file for each host.

## secrets

run `rg /etc/secrets/` to see where you need to add secret files when deploying on new systems

unfortunately, as a consequence of this secret method, you need to do impure builds

## todo

  - find a better way to do cloudflare ips
  - per-host architecture selection, atm it is hardcoded to `aarch64`
  - move common config such as bootloader and networking settings to [`default.nix`](./default.nix)
  - swap back to hardened kernel
  - leverage nixos-hardware
  - unscuff metrics
  - wtaf is going on w/ our user management??
  - Jellyfin... yea,,,