Tag about-nix
7 bookmarks have this tag.
NixOS, Nix, nixpkgs and also Guix, Tvix and stuff.
A Nix DSL for defining DNS zones
github.com/nix-community/dns.nixnix-output-monitor: fun build progress display
github.com/maralorn/nix-output-monitorthe nix iceberg
cohost.org/leftpaddotpy/post/3885451-the-nix-icebergsadly, doesn’t provide links, but most is googlable
nix-std: no-nixpkgs standard library for the nix expression language
github.com/chessai/nix-stdtips for systemd services management and hardening in NixOS
git.selfprivacy.org/alexoundos/articles/src/branch/master/systemd-hardening-in-NixOS/article.mdWhen it comes to security, we care about limiting access of each entity of a system to as few other entities as possible. Network input, executables and users must be able to reach only those resources, which are necessary to perform the defined server tasks. Principle of least priviledge.
Generally, it's better to implement as many layers of security as possible. Although, there is no way to make a server 100% bullet proof - it's a huge endless topic, this article covers some feasible essential systemd tunables that give us a layer of protection.
Colmena
colmena.cli.rs/unstableColmena is a simple, stateless NixOS deployment tool modeled after NixOps and morph, written in Rust. It's a thin wrapper over Nix commands like nix-instantiate and nix-copy-closure, and supports parallel deployment.
garnix | the nix CI
garnix.ioSimple, fast, and green CI and caching for nix projects