One Nix flake, twenty-one hosts, five different operating-system situations — including a phone and a 2009 iMac. An overview, and an index of the deep dives.

Seven nixpkgs branches, each pinned for a stated reason; secrets without agenix or sops; and two mechanisms that stop a remote switch from bricking the machine.

A full Nix userland on Android needs a reimplemented replaceDependencies — and a base-32-to-base-64 hash re-encoding to keep store paths byte-identical in length.

Inverted SSH ciphers, a measured 92 MiB kernel diet, an ext4 patch with an upstream submission kit, and swap over NVMe-over-TCP.

What this site is, and where the rest of my corner of the internet lives.