A NixOS Flake for my macOS development environment.
This flake uses nix-machine - a convenience flake for configuring your machine using nix-darwin and home-manager.
All configuration for my machine lives within the configuration directory and is disabled by default.
Configuration that I have deemed to be a good default for nix, nix-darwin, and home manager has been moved into nix-machine's configuration directory.
The general contents of this flake are:
- MacOS defaults and network configuration
- Terminal emulator, prompt and shell setup
- Git configuration
- OpenSSH with Yubikey support
- VSCode configuration with unmanaged extensions
- Chat and video conferencing apps
- Various apps from the App Store via Homebrew
- Pre-commit checks: secrets, shellcheck and formatting
The install.sh and go.sh scripts are the entry points into this repository. The install script is used on a fresh macOS installation to bootstrap the development environment. The go script is used to apply new configuration, or update the flake inputs.
mkdir -p "$HOME/.config"
git clone https://github.com/squirmy/nixos-config "$HOME/.config/nixos-config"cd "$HOME/.config/nixos-config"
./go.shI plan to run this on a fresh setup from time to time so I have created an install script to automate the above tasks. It can be tweaked for your own setup. Please be careful using this and take the time to understand how it works before you run it.
Steps:
- Sign in with your Apple ID
- Enable FileVault
- Restart
- Run the install script
NIXOS_CONFIG_HOSTNAME=Squirmy-MBP bash <(curl -L 'https://raw.githubusercontent.com/squirmy/nixos-config/main/install.sh')There are some things you need to be aware of before you run this on your system.
- There are system defaults configured in configuration/nix-darwin/macos.nix that will persist even after installation. Double check that you're ok with these settings, and if not remove or customize them.
- You need to customize your user details in flake.nix. Be sure to set your username, name and e-mail.
- You need to customize your hostname in flake.nix. The relevant config is
nix-machine.macos.{your-hostname-here}. Runhostname -sto get the correct value. - Update the DNS resolvers in configuration/nix-darwin/network.nix if you prefer another resolver.
- Read through the rest of the files carefully and decide if you want the configuration. Remove anything you do not want to be included. You can always add things back in.
This can be fixed by giving your terminal full disk access in Settings -> Privacy & Security -> Full Disk Access.
Fix found on reddit.
Safari is sandboxed preventing defaults from read/writing to it. Your terminal needs full disk access so defaults can access the sandboxed container.
Nix Darwin
Home Manager