A modular, highly-opinionated NixOS configuration built for AI-assisted development, security, and performance.

• 🤖 AI-First Workflow: Ollama (70B models), Aider, and Fabric (AI-Augmented Hacking pattern engine).
• 🚀 Modern Desktop: Bleeding-edge COSMIC DE with tiling support.
• 🕵️‍♂️ Security Research: Full Bug Bounty stack (Burp, Nuclei, Nmap, Zap) defined in security.nix.
• 🔒 Secure by Design:
  • Secrets: Managed via sops-nix (encrypted with Age/YubiKey).
  • Sandboxing: Critical apps (Chrome, Obsidian) are isolated using nixpak.
• ⚡ High Performance: Tuned kernel parameters, massive ZRAM swap, and Intel compute drivers.
• 🛠️ Developer Experience: nix-ld for binary compatibility, starship prompt, and direnv.

This repository follows a modular "common + host" pattern:

.
├── 📂 modules/          # Shared configuration components
│   ├── nixos/           # System-level modules (Core, Desktop, Hardware)
│   │   ├── nixpak/      # Sandboxing configurations
│   │   └── security.nix # ClamAV & System Security
│   └── home-manager/    # User-level modules (Shell, Dev, Desktop)
├── 📂 hosts/            # Machine-specific configurations
│   └── nixos-nvme/      # Primary workstation
└── 📄 flake.nix         # Entry point

This project uses just as a command runner.

Get all tools (sops, statix, deadnix, aider) instantly:

nix develop
# OR
just dev

Run linting and tests before applying:

just lint      # Runs statix & deadnix
just test      # Builds VM to test configuration

Apply the configuration to your running system:

just switch

Launch the AI Architect (Aider) to edit your config:

just architect

Manually trigger the incremental antivirus scan:

sudo systemctl start clamav-smart-scan

Maintained by Martin Kleinberger