One flake for the whole distribution. NixOS + Home Manager configure every personal machine from one reviewed source of truth.
The flake exports these NixOS host configurations:
| Host | Hardware | Role |
|---|---|---|
strix |
Framework Desktop, AMD Strix Halo | Headless compute and Herdr, wired 10.42.0.2; Halogen and on-demand Immich ML |
nas |
UGREEN NASync DXP2800 GT, AMD R2514 | Wired 10.42.0.1: storage, DNS, media, and the closet's Tailscale subnet router |
client |
ASUS Zenbook Duo | Physical Sway desktop; Huion, Magic Trackpad and remote Herdr projector |
Strix and NAS plug into the BE550, with Freebox upstream. Strix's public
Internet route goes directly through BE550; private service DNS uses NAS.
coordinator remains an SSH/LAN compatibility alias for strix during migration.
Worker and Otto are retired. See docs/closet-cutover.md for the staged rollout.
flake.nix three NixOS hosts wired through one mkHost
modules/ common.nix (every host) + strix.nix (AMD Strix Halo compute host)
hosts/ one module per machine
home/ home-manager: typed nix (home.nix, nvim.nix) + RAW out-of-store
configs (sway, kitty, fish, nvim lua) linked via mkOutOfStoreSymlink
overlays/ pkgs/ custom packages (mactahoe themes, …)
docs/local-ai/ the halogen server, the model catalogue and per-host wanted sets
docs/old/ archival stub indexing retired docs in Git history
Bought 2026-08-07 · $51 (from $75) · 92 days · expires 2026-11-07. 10,000 credits every 7 days. They do NOT roll over.
The budget is a rolling weekly allowance, not a quarterly pot: at ~13 weeks that is ~130,000 credits total, and every week you underspend is burned. To get the $51 back you need to average ~1,400 credits a day — spending nothing Monday to Friday and then hammering it on Saturday does not recover the week.
- Concurrency is the lever. The plan explicitly allows 3–4 agents at once. One serial pi session cannot spend 10,000 credits a week; three or four parallel ones can. Reach for the fleet, not a bigger single prompt.
- The advertised 3,000 credits / 5 hours burst cap is Temporarily removed by Alibaba as of purchase, so nothing throttles a hard day right now.
- Models on the plan:
qwen3.8-max,qwen3.7-max,glm-5.2,deepseek-v4-flash-0731— all four verified live against the endpoint on purchase day and available in pi under the Qwen Token Plan provider.
Wiring: key at secrets/qwencloud-token.age (strix-only), delivered to
/run/agenix/qwencloud-token, read per request by pi via ~/.pi/agent/models.json
(generated by home/pi.nix). It is never exported into the environment.
Key created 2026-09-29 · $40 of one-time credits (Tom, 09-16: "$40 before October"). Plus 1,000 free-model requests a day on the same key.
stealth/space-bunny-alpha: free, 1M context, text and image input, and reasoning. Stealth models are withdrawn without notice and their provider logs prompts, so never send it private or health material. It appears in pi under OpenRouter as "Space Bunny Alpha (stealth, free)".- The $40 buys any paid model in pi's built-in OpenRouter catalog. Check
what is left with
curl -s https://openrouter.ai/api/v1/credits -H "Authorization: Bearer $(cat /run/agenix/openrouter-token)".
Wiring: key at secrets/openrouter-token.age (strix-only), delivered to
/run/agenix/openrouter-token, read per request by pi via ~/.pi/agent/models.json
(generated by home/pi.nix). It is never exported into the environment.
main— canonical and NixOS-only.archive/*— read-only historical lineage; never used for deployment.
# on a NixOS host
sudo nixos-rebuild switch --flake .#<host>