main
..
README.md
rw-r--r--
1.6 KB
apply.sh
rwxr-xr-x
3.4 KB
authorize-builder.sh
rwxr-xr-x
805 B
bootstrap.sh
rwxr-xr-x
2.8 KB
test-bootstrap.sh
rwxr-xr-x
690 B
test-builder-key.sh
rwxr-xr-x
457 B

Nagoya — Debian + Determinate Nix

Nagoya is a Raspberry Pi 5 running Debian on aarch64-linux. Debian continues to manage packages, services, networking, and WireGuard. Determinate Nix provides the Nix daemon; Home Manager provides the small interactive builder environment.

Bootstrap

The bootstrap is safe to rerun. It installs Nix when absent, clones or fast-forwards ~/src/home, deploys only /etc/hosts and /etc/nix/nix.custom.conf, and switches the vincent@nagoya Home Manager profile. It does not install Debian packages, change services, or modify WireGuard.

From a host with SSH access:

ssh -i ~/.ssh/id_homelab_sk vincent@nagoya.vpn 'bash -s' \
  < imperative/nagoya/bootstrap.sh

Or run it on Nagoya after obtaining the repository:

cd ~/src/home
bash imperative/nagoya/bootstrap.sh

Routine updates

On Nagoya:

cd ~/src/home
make host/nagoya/build
make host/nagoya/switch

host/nagoya/switch requires sudo only to install the generated host files.

Managed configuration

  • systems/nagoya/gen-configs.nix generates /etc/hosts and /etc/nix/nix.custom.conf.
  • systems/nagoya/home.nix selects the minimal headless builder profile: shell tooling, direnv, and Nix authoring tools. It intentionally omits desktop, mail, Syncthing, containers, and automatic cleanup.
  • Existing WireGuard configuration is deliberately out of scope. Its Debian package and service remain host-managed, and its private key remains outside the Nix store.