From 1238703d9fb4e612883df99076f93f667111f08b Mon Sep 17 00:00:00 2001 From: Padreug Date: Sun, 28 Jun 2026 10:10:38 +0200 Subject: [PATCH] refactor(flake): drop maintainer's personal host from public template The public template should ship the copy-me `example` host and the ISO, not the maintainer's real machine. bohm's `omnixy` host enables MCP servers that require secrets (absent in the public tree), so it broke `nix flake check` on the public branch. It moves to the private omnixy-private branch (which re-adds it with the real secrets). Forkers define their own host modeled on `example`. Co-Authored-By: Claude Opus 4.8 --- flake.nix | 29 ++++++----------------------- 1 file changed, 6 insertions(+), 23 deletions(-) diff --git a/flake.nix b/flake.nix index edbf68d..50dabdb 100644 --- a/flake.nix +++ b/flake.nix @@ -219,30 +219,13 @@ in { # NixOS configurations. + # + # This public template ships the `example` host (copy-me starter) and + # the live ISO. The maintainer's personal host (`omni`, a real + # machine with secrets + private hardware/VPN) is NOT here — it lives + # on the private `omni-private` branch, which adds it back alongside + # the real secret files. Forkers define their own host like `example`. nixosConfigurations = { - # Main dev box. Uses the mksystem convention (hosts/omni/ + - # users/user/home-manager.nix shims — see commit dc9d70b). - # - # modules = [ ... ] is the escape hatch for host-specific - # home-manager options that mksystem doesn't expose directly, - # like sharedModules for nix-colors integration. - omni = mkSystem "omni" { - inherit system; - user = settings.user; - devEnv = true; - extraSpecialArgs = { inherit settings; }; - extraHmArgs = { inherit settings; }; - modules = [ - { - home-manager.sharedModules = [ - inputs.nix-colors.homeManagerModules.default - inputs.lazyvim.homeManagerModules.default - inputs.walker.homeManagerModules.default - ]; - } - ]; - }; - # Copy-me template host (hosts/example/). Kept as a real, # build-checked target so the template can't silently rot — its # placeholder hardware-configuration.nix uses by-label devices