ryan4yin/nix-config
❄️ My nix config for both desktops(NixOS+macOS) and homelab servers(NixOS).
ARCHETYPE
Pragmatist
A balanced, no-drama setup: some rules, some tools, nothing extreme.
Copy this rig
# review before running: this installs third-party code $ claude mcp add grafana -e GRAFANA_URL=YOUR_GRAFANA_URL -- mcp-grafana --disable-write $ npx degit ryan4yin/nix-config/agents ./rig-nix-config/agents
MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ claude mcp add grafana -e GRAFANA_URL=YOUR_GRAFANA_URL -- mcp-grafana --disable-write $ npx degit ryan4yin/nix-config/.agents/skills/nix-config-debug .claude/skills/nix-config-debug $ npx degit ryan4yin/nix-config/.agents/skills/nix-config-desktop .claude/skills/nix-config-desktop $ npx degit ryan4yin/nix-config/.agents/skills/nix-config-new-host .claude/skills/nix-config-new-host $ npx degit ryan4yin/nix-config/.agents/skills/nix-config-secrets .claude/skills/nix-config-secrets $ npx degit ryan4yin/nix-config/.agents/skills/nix-config-umu-game .claude/skills/nix-config-umu-game $ npx degit ryan4yin/nix-config/.agents/skills/nix-config-update .claude/skills/nix-config-update $ npx degit ryan4yin/nix-config/.agents/skills/nixpkgs-patched .claude/skills/nixpkgs-patched $ npx degit ryan4yin/nix-config/.agents/skills/nixpkgs-review .claude/skills/nixpkgs-review
This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} MCP servers (1)
| server | source | est. tokens |
|---|---|---|
| mcp-grafana · "grafana" env: GRAFANA_URL | binary | 2.5k |
Skills (8)
Similar rigs
HotThoughts/dotfiles
A repo for all my config file, including neovim, fish, tmux, ghostty, starship, pre-commit, and more.
MCP Hoarder 12.4k tok ·
colonelpanic8/dotfiles
Configuration files for XMonad, Emacs, NixOS, Taffybar and more.
Skill Collector 4.7k tok ·
anomalyco/opencode
The open source coding agent.
Pragmatist 4.2k tok ·
DietrichGebert/ponytail
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
Pragmatist 1.6k tok ·