lifeich1
Community@lifeich1
lifeich1 maintains NixOS and Home Manager flake configuration skills covering module changes, Agenix secrets, deployments, Nixvim, firewall services, and proxied network egress.
Agent Skills by lifeich1
Showing 8 vetted skills indexed across 1 GitHub repositories.
nixcf-module-change
Implements and validates scoped NixOS and Home Manager module changes in the nixcf repository.
nixcf-secrets-agenix
Audits and rewires Agenix-managed secrets in the nixcf NixOS flake without exposing plaintext.
nixcf-deploy
Plans, validates, deploys, verifies, and rolls back NixOS flake hosts with staged authorization gates.
nixcf-flake-package
Manages flake inputs and external packages in the nixcf NixOS repository with controlled lockfile updates.
nixcf-nixvim
Maintains and reviews Nixvim and Home Manager Neovim configuration across NixOS host profiles.
nixcf-service-firewall
Refactors NixOS and Home Manager services with single-owner firewall rules in the nixcf repository.
commit-message
Generate Git commit messages following the Gitmoji convention with scoped imperative descriptions.
labyrinth-dimension
Route blocked network requests through a discovered SOCKS5 proxy and restore state afterward.
Frequently Asked Questions About lifeich1
FAQPage SchemaWhat tasks can I perform with lifeich1's nixcf skills?▼
You can implement scoped NixOS/Home Manager module changes, audit and rotate Agenix secrets, manage flake inputs and external packages, configure Nixvim with LSP and Treesitter, assign firewall rules to network services like Gitea and Syncthing, deploy or roll back hosts, and route blocked traffic through a SOCKS5 proxy.
Who are these skills designed for?▼
They target NixOS and Home Manager administrators maintaining the nixcf flake repository across GTR7, XPS13, and Pi4B hosts. Users should be comfortable with Nix expressions, flakes, systemd services, and declarative system configuration rather than general-purpose Linux administration.
How do deployments work with the nixcf-deploy skill?▼
The skill guides planning, validation with just chk, NixOS builds and tests, local nixos-rebuild activation, and remote deployment via just pi, just xps, or just gtr7. It also covers deployment tags, post-deploy health checks, failed switch recovery, and generation rollback for the three managed hosts.
How are secrets handled in the nixcf repository?▼
Secrets are managed through Agenix: declarations in secrets/default.nix, recipient mappings in secrets/secrets.nix, and encrypted .age payloads. The skill covers recipient changes, rotation planning, plaintext-to-Agenix migration, credential leak remediation, and the cross-layer Attic client/server/netrc credential path.
What prerequisites are needed to use these skills?▼
You need the nixcf NixOS flake repository, a working Nix installation with flakes enabled, and access to the managed hosts (nixos-gtr7, nixos-xps13, nixos-pi4b). Secret operations require Agenix keys, and the labyrinth-dimension skill requires an available SOCKS5 proxy for censored network egress.