







An audit of 445 NixOS modules shows the cost of making configuration and secrets share one interface.

Nix & NixOS | Declarative builds and deployments
Nix is a tool that takes a unique approach to package management and system configuration. Learn how to make reproducible, declarative and reliable systems.

Michael Livs on Twitter / X
introducing pi-psst 🤫, your agent uses secrets without ever seeing them. no more scrubbing for @badlogicgames!secrets are injected as env vars to bash tool, scrubbed from all tool output, stored in local encrypted vault. the agent knows what's available but never sees a value.… pic.twitter.com/LB4RA5p4wF— Michael Livs (@micLivs) April 6, 2026
Tracking NixOS option values and dependencies | oddlama's blog
oddlama's personal web page and blog
[Backport release-26.05] rustdesk-server: 1.1.14 -> 1.1.16 by nixpkgs-ci[bot] · Pull Request #546973 · NixOS/nixpkgs
Bot-based backport to release-26.05, triggered by a label in #479340. Before merging, ensure that this backport is acceptable for the release. Even as a non-committer, if you find that it is not ac...
Please Stop Using `nixos-rebuild switch`
Better practices for safely and reliably deploying and updating NixOS systems.
The Nixpkgs core team has disbanded
The Nixpkgs core team has unfortunately decided to disband. We’re proud to have had the opportunity to lead by example in bottom‐up, consensus‐focused governance for Nixpkgs, and of our achievements over the past 10 months, including reforming the committer delegation process and onboarding 19 new committers, empowering maintainers by extending the merge bot, re‐establishing contact with GitHub and securing the sponsored Enterprise Cloud upgrade, helping triage GHSA-67f2-674w-6g63 and track the...
Declarative Server with NixOS: A Reproducible Infrastructure | Mustafa Erbay
A technical guide exploring how to create a declarative server configuration with NixOS, covering reproducibility and rollback processes.

nix-community/nixos-apple-silicon
Resources to install NixOS bare metal on Apple Silicon Macs [maintainers=@tpwrules,@flokli,@yuyuyureka]

My declarative multi-machine homelab, explained | Bas Nijholt
Friends keep asking how my homelab works, so I wrote it all down, starting from zero. Four NixOS machines run about 150 containers behind one Traefik front door, and with WireGuard and my own Headscale server I reach my self-hosted services from anywhere over encrypted HTTPS connections, while strangers on the internet get nothing. The part I think is the coolest is the balance: everything is declarative and lives in git, but with as little machinery as possible.
