nixconf

Repository manager for a multi-repo NixOS configuration: one shared nixos-common, one nixos-<host> per machine, and one nixos-<user> per user. nixconf keeps the sub-repos in sync — cloning them, running nix flake update across all of them, verifying that consumers track the latest nixos-common, and forwarding arbitrary git commands into each working tree.

Grab a tarball for your platform from the releases page and place the nixconf binary on your $PATH.

nix run github:xx4h/nixconf
# or, in a flake:
inputs.nixconf.url = "github:xx4h/nixconf";

The package installs Bash/Zsh/Fish completion files into the standard share/ paths, so shells that auto-load vendor completions pick them up without further configuration.

A Home Manager module is exposed at homeManagerModules.default:

{
  inputs.nixconf.url = "github:xx4h/nixconf";
}

# in your Home Manager config
{ inputs, ... }: {
  imports = [ inputs.nixconf.homeManagerModules.default ];

  programs.nixconf = {
    enable = true;
    # All three default to true; toggle off to skip the shell init hook.
    # enableBashIntegration = true;
    # enableZshIntegration  = true;
    # enableFishIntegration = true;
  };
}

brew install xx4h/tap/nixconf

git clone https://github.com/xx4h/nixconf.git
cd nixconf
task build               # → ./bin/nixconf
task local-install       # → ~/.local/bin/nixconf

nixconf reads nixconf.yaml from the first match in this order:

1. The path passed to -c, --config <path>
2. The first nixconf.yaml found walking up from the current directory
3. $XDG_CONFIG_HOME/nixconf.yaml (or ~/.config/nixconf.yaml)

Run nixconf init to create a starter file at $XDG_CONFIG_HOME/nixconf.yaml, or nixconf init <path> to write it elsewhere.

The file lists the repos to manage, grouped into common, hosts, and users:

git_base: "git@github.com:<user>"

# Optional. Repos are cloned under this directory. Defaults to
# $XDG_DATA_HOME/nixconf (or ~/.local/share/nixconf). Relative values
# are resolved against the directory holding this file.
# data_dir: ""

# Optional. Controls how `nixconf update` commits the bumped flake.lock.
# Defaults shown.
update:
  # `{{inputs}}` is replaced with " <input1> <input2>" when INPUTs are
  # passed on the command line, and with "" otherwise.
  commit_message: "chore(deps): flake update{{inputs}}"
  # Extra args appended to `git commit`. An explicit empty list disables
  # signing (`commit_flags: []`).
  commit_flags: ["-v", "-s", "-S"]

repos:
  common:
    - name: nixos-common
      path: nixos-common
  hosts:
    - name: nixos-desktop
      path: hosts/nixos-desktop
    - name: nixos-laptop
      path: hosts/nixos-laptop
    # Per-repo `url` overrides git_base entirely.
    - name: nixos-other
      path: hosts/nixos-other
      url: "https://git.example.com/team/nixos-other.git"
    # Disabled entries are skipped by clone/update/verify/git.
    - name: nixos-archive
      path: hosts/nixos-archive
      disabled: true
  users:
    - name: nixos-<user>
      path: users/nixos-<user>

git_base is optional if every repository provides its own url.

Arbitrary Git commands are run only via the explicit nixconf git subcommand; unknown subcommands are no longer auto-forwarded.

Selectors (combine with any command):

# create a starter config in $XDG_CONFIG_HOME/nixconf.yaml
nixconf init

# add a host, then clone everything
nixconf config add host nixos-desktop
nixconf clone

# bump nixpkgs across all repos, commit + push the lockfile in each
nixconf update nixpkgs

# bump everything, only in host repos
nixconf --hosts update

# check that every host/user flake.lock pins the latest nixos-common
nixconf verify

# git in every repo (use the explicit `git` subcommand)
nixconf git status
nixconf --hosts git pull
nixconf -r nixos-common git log --oneline -5

# zsh — one-time setup
nixconf completion zsh > "${fpath[1]}/_nixconf"

# bash
nixconf completion bash > /etc/bash_completion.d/nixconf

Apache-2.0. See LICENSE and NOTICE.