SrvOS - NixOS for your server

STATUS: experimental

SrvOS is a collection of opinionated and sharable NixOS configurations.

As we learn more about NixOS in various deployments, we end up re-writing the same modules and configs. This is a way for us to speed up and share our setups.

Instead of supporting everything, our goal is to target certain verticals and make the support super smooth there.

Usage

Add srvos to your flake.nix and include it in your nixos configuration. For example to deploy a GitHub Action runner on Hetzner:

{
  inputs = {
    srvos.url = "github:numtide/srvos";
  };
  outputs = { srvos, nixpkgs, ... }: {
    nixosConfigurations.myHost = nixpkgs.lib.nixosSystem {
      system = "x86_64-linux";
      modules = [
        srvos.nixosModules.common
        srvos.nixosModules.hardware-hetzner-amd
        srvos.nixosModules.roles-github-actions-runner
      ];
    };
  };
}

Modules

All modules are defined in this file

General

Used to define the type of machine.

• server:
  • Use this for headless systems that are remotely managed via ssh
  • Includes everything from common
  • Disables desktop features like sound
  • Defaults to UTC
  • Enables ssh
  • Configures watchdog for reboot
  • Sets up sudo without password
  • ...
• desktop:
  • Mostly based on common but also includes some optimization for useful for interactive usage
• common:
  • Use if you are unsure if your nixos module will be used on server or desktop
  • Better nix-daemon defaults
  • Better serial console support
  • Colored package diffs on nixos-rebuild
  • Use systemd in initrd by default and networkd as a backend for the Networking module
  • Do not block on networkd/networkmanager's online target
  • Better zfs defaults
  • Add well-known ssh git ssh keys to the git configuration

Hardware

NixOS hardware configurations that we know about.

• hardware-amazon: Amazon AWS virtual machines
• hardware-hetzner-cloud: Hardware and network defaults for Hetzner virtual machine
• hardware-hetzner-amd: Hardware and network defaults for Hetzner bare-metal servers for AMD and Intel cpus.
• hardware-hetzner-intel: "

Mixins

Config extensions for a given machine.

• mixins-cloud-init enables cloud-init
• mixins-systemd-boot configure systemd-boot as bootloader
• mixins-telegraf enables a generic telegraf configuration. See Mic's dotfiles for monitoring rules targeting this telegraf configuration.
• mixins-nginx recommended nginx settings
• mixins-trusted-nix-caches list of trust-worthy public binary caches

Roles

Designed to take over a machine with the given role.

• roles-github-actions-runner configures GitHub actions runner on a machine

License

MIT

---

This is a Numtide project.