hosts

Imported from gapuchi/nix (hosts/AGENTS.md). Install upstream with npx skills add gapuchi/nix --skill hosts. Copyright stays with the author.

Hosts

Hardware-specific NixOS files live here. Machine configurations (flake outputs) are in modules/hosts/.

For the module-library/host-wiring split, the my.* contract, just commands, and agenix secrets, see the root AGENTS.md.

Layout

A host file builds one output (nixosSystem / darwinSystem / homeManagerConfiguration), pulls registered modules from config.flake.modules.*, and sets my.*. Output names match the host directory: calculus, haddock, tintin, arjun@arjun-gt.

Key machines

calculus (Linux server)

Home server: gapuchiServer plus calculus/lab modules (caddy, homepage, plex, pihole, homeAssistant, golink, mafiaBot, leagueBot, cachix, serviceHealth, calculusDeploy, tailscale). Those lab modules are single-host features (hardcoded *.lab.adhia.net, LAN, dashboard) selected only here — not a shared bundle. The homepage dashboard at home.lab.adhia.net links the other services from one spot; serviceHealth exposes a loopback HTTP endpoint mapping systemctl is-active to 200/503 so headless systemd units (the bots) get up/down status on the dashboard. calculusDeploy enables system.autoUpgrade against the floating calculus tag (~every 5 min); move the tag with just deploy-calculus. Running revision stays nixos-version --configuration-revision. Home Manager uses gapuchiTerminal (via gapuchiServer). See modules/hosts/calculus/default.nix.

haddock (Linux desktop)

NixOS workstation with GNOME via gapuchiLinuxDesktop (Home Manager gapuchiTerminal + gapuchiDesktop) + tailscale. See modules/hosts/haddock/default.nix.

tintin (macOS)

nix-darwin (darwinConfigurations.tintin) using base, gapuchiDefaults, Home Manager, and homeImports of gapuchiTerminal + ghostty. See modules/hosts/tintin/default.nix.

arjun-gt (macOS)

Standalone Home Manager (homeConfigurations."arjun@arjun-gt") using gapuchiTerminal, with a per-user age.secrets override. See modules/hosts/arjun-gt/default.nix.

Add a new site behind Caddy

Caddy on calculus serves *.lab.adhia.net with a Let's Encrypt cert via Cloudflare DNS-01 (token in the caddy-dns-token secret). 80/443 are only reachable over Tailscale.

1. Pick an unused local port for the backend service and configure it to listen on localhost:<port>.
2. Add a virtualHosts."<name>.lab.adhia.net".extraConfig in modules/nixos/caddy.nix with reverse_proxy localhost:<port> and the shared ${tls} block.
3. Wire the service: extend modules/hosts/calculus/default.nix, or add a modules/nixos/<svc>.nix and import it there.
4. Apply from the repo root: just switch.