Description

NixOS is a Linux distribution with a unique package management system, Nix, offering precise control and reproducible configurations. It follows a declarative and functional programming approach, ensuring system reliability and easy rollback.

You could directly use this but it's better to extract the pieces you want in your own config. Check out nix-starter-config for a good initial starting point for NixOS with flakes.

Services

Router

Service	Description	Configuration
ACME	ACME server for internal TLS certificates.	acme.nix
Blocklist	Manages a network-wide blocklist.	blocklist.nix
Firewall	Manages network traffic rules using nftables.	firewall.nix
Interfaces	Configures network interfaces and PPPoE.	interfaces.nix
ntopng	Network traffic monitoring tool.	ntopng.nix
Vaultwarden	Password manager (Bitwarden compatible).	vaultwarden.nix

Main file server

Service	Description	Configuration
Atuin	Shell history synchronization.	atuin.nix
Bincache	Binary cache with Attic.	bincache.nix
Garage	Object storage (Garage API + UI) for media assets.	garage.nix
Calendar (Radicale)	CalDAV and CardDAV server.	calendar.nix
Database stack	PostgreSQL, MinIO buckets, pgAdmin UI.	database.nix
Immich	Self-hosted photo and video backup solution.	immich.nix
Koito	Music scrobbler for Last.fm / ListenBrainz.	koito.nix
Mastodon (glitch-soc)	Federated social media server.	mastodon.nix
Matrix Synapse	Secure, decentralized communication server.	matrix.nix
Microbin	Self-hosted pastebin.	microbin.nix
Monitoring	Grafana, Promtail, Prometheus, InfluxDB.	monitoring.nix
Ollama	LLM server for AI-powered spam filtering.	ollama.nix
Paperless-NGX	Document management system.	paperless.nix
Rspamd	Spam filter with AI-powered GPT plugin.	rspamd.nix
Shares	NFS exports for internal hosts.	shares.nix
Storage	ZFS datasets, syncoid replication.	storage.nix

Cloud #1

Service	Description	Configuration
Authoritative DNS	Authoritative DNS server.	authdns.nix
Derper	Tailscale DERP server.	derper.nix
Headscale	Self-hosted Tailscale control server.	headscale.nix
Notifications	Gotify and SMTP gateway bridge.	notifs.nix
Uptime Kuma	Service monitoring tool.	uptime.nix

Cloud #2

Service	Description	Configuration
Authoritative DNS	Authoritative DNS server.	authdns.nix
Derper	Tailscale DERP server.	derper.nix
Caddy	Reverse proxy for boers.email + static sites.	caddy.nix
Endlessh	SSH tarpit.	endlessh.nix
Umami	Self-hosted web analytics.	umami.nix

Backups

Service	Description	Configuration
AdGuard Home	Network-wide ad and tracker blocking DNS sinkhole.	adguard.nix
Backup	Borg backup repositories for all hosts.	backup.nix
Ladder	Self-hosted 12ft.io alternative.	ladder.nix

WiFi AP

Service	Description	Configuration
Home Assistant	Home automation platform.	hass.nix

Utilities + GPS timeserver

Service	Description	Configuration
Cyberchef	The Cyber Swiss Army Knife.	cyberchef.nix
IT-Tools	A collection of useful online tools for developers.	ittools.nix
NTP	Network Time Protocol daemon.	ntp.nix