Hacker News new | ask | show | jobs
by heinrichhartman 1707 days ago
#MeToo. I am using two OSX machines and two remote Linux machines for my day-2-day private/work related stuff.

Nix+home-manager allows me to have all productivity tools consistently available across all platforms with minimal effort [1].

Dotfiles/shell config lives in a separate folder [2] and is not managed in nix.

Tangent: Secrets are are encrypted with git-crypt (https://github.com/AGWA/git-crypt) and live in the same repo [3]. I generate GPG keys for every new host I am working on and check in the public keys to the repo as well, then "approve" them from an authorized host using `git-crypt add-gpg-user ... && git push` [4]. This gives strong encryption without managing passwords by hand. [Copy of private key is kept in bitwarden as backup].

Getting the hang of Nix took me a while. I wrote-up my journey to get the latest-gratest emacs installed here [5]. But now I am over the bump, and it's adding value to my workfows. E.g. I switched some projects from docker to nix-shell for lightweight virtual-envs, e.g. [6].

[1] https://github.com/HeinrichHartmann/dotfiles/blob/master/nix...

[2] https://github.com/HeinrichHartmann/dotfiles/tree/master/.sh...

[3] https://github.com/HeinrichHartmann/dotfiles/tree/master/sec...

[4] https://github.com/HeinrichHartmann/dotfiles/tree/master/pub...

[5] https://www.heinrichhartmann.com/posts/2021-08-08-nix-emacs/

[6] https://github.com/HeinrichHartmann/HeinrichHartmann.github....

1 comments

> #MeToo

maybe best to avoid that https://en.m.wikipedia.org/wiki/Me_Too_movement