nix-config

Files

Zuckerberg cf71b74d6f Add Incus container support to sandboxed workspaces

- Add incus.nix module for fully declarative Incus/LXC containers
- Build NixOS LXC images using nixpkgs.lib.nixosSystem
- Ephemeral containers: recreated on each start, cleaned up on stop
- Use flock to serialize concurrent container operations
- Deterministic MAC addresses via lib.mkMac to prevent ARP cache issues
- Add veth* to NetworkManager unmanaged interfaces
- Update CLAUDE.md with coding conventions and shared lib docs

2026-02-08 15:16:40 -08:00

ca.rsa.4096.crt

Initial prototype for Wireguard based PIA VPN - not quite 'ready' yet

2023-03-08 23:49:02 -07:00

default.nix

Add sandboxed-workspace module for isolated dev environments

2026-02-07 22:43:08 -08:00

pia-openvpn.nix

Refactor imports and secrets. Add per system properties and role based secret access.

2023-04-21 12:58:11 -06:00

pia-wireguard.nix

Upgrade NixOS. Use upstream libedgetpu, frigate, and gasket kernel module. Fix services broken by upgrade.