Nix Fleet, part 3. Part 1 covered the architecture; Part 2 made builds painless. This part handles the thing you must not commit to a public config repo: secrets. My whole system is declared in a Git…
Nix Fleet, part 4. The series so far: the one-flake architecture, remote builders, and fleet-wide secrets. This part is where it all gets pointed at bare metal — a 5-bay ARM NAS, installed declarative…
Nix Fleet, part 1. This post is the architecture overview. Later parts go deep on the pieces it depends on: cross-arch remote builders, fleet-wide secrets with agenix, and bare-metal install of a NAS …
Nix Fleet, part 2. Part 1 laid out the one-flake-every-machine architecture. This part solves the problem that makes a mixed Linux/macOS fleet painful: my laptop can't build Linux. When you develop N…