MinBZK/DAWO-NixOS
MinBZK/DAWO-NixOS
36
5
Fork 0
Code Releases 2 Activity
Digitaal Autonome Werkomgeving Overheid (DAWO) streeft naar een digitaal autonome en interoperabele basis voor overheidswerkplekken. De repository MinBZK/DAWO-NixOS bevat de code om werkplekken automatisch en identiek op te bouwen via het Linux-besturingssysteem NixOS. https://dawo.overheid-a.nl/
128 commits 22 branches 5 tags 2.6 MiB
  • Nix 100%
Find a file
Exact
Rutger Putter 4db976f05c
 fixup: typo
2026-09-17 13:04:20 +02:00
.forgejo/workflows fix(ci): use Forgejo's artifact actions, so the SBOM job keeps what it made 2026-09-04 16:46:22 +02:00
artwork feat(dawo-generic): add first instance of generic DAWO profile 2026-06-17 15:46:00 +02:00
assets/disko fix(disko): move the manual layout out of modules 2026-08-05 14:23:15 +02:00
docs fix(ci): use Forgejo's artifact actions, so the SBOM job keeps what it made 2026-09-04 16:46:22 +02:00
modules chore(ci): format and lint the tree with treefmt, statix and deadnix 2026-09-07 13:28:53 +02:00
.gitattributes chore(git): stop resolving the same two merge conflicts by hand 2026-09-04 16:12:59 +02:00
.gitignore feat(ci): publish an SBOM per host, and report what is known wrong with it 2026-09-04 16:06:50 +02:00
architecture.md docs(hardening): write down the register before anything depends on it 2026-09-04 16:04:54 +02:00
ATTRIBUTIONS.md fixup: typo 2026-09-17 13:04:20 +02:00
CHANGELOG.md docs(hardening): write down the register before anything depends on it 2026-09-04 16:04:54 +02:00
CONTRIBUTING.md docs: add AI policy and PR assignment workflow 2026-06-22 15:17:57 +02:00
flake.lock chore(ci): format and lint the tree with treefmt, statix and deadnix 2026-09-07 13:28:53 +02:00
flake.nix chore(ci): format and lint the tree with treefmt, statix and deadnix 2026-09-07 13:28:53 +02:00
LICENSE.md feat(dawo-generic): add first instance of generic DAWO profile 2026-06-17 15:46:00 +02:00
README.md docs(hardening): write down the register before anything depends on it 2026-09-04 16:04:54 +02:00

README.md

DAWO Core Repository

This repository contains the core NixOS configurations for the DAWO infrastructure. It utilizes a flake-based build system to provide reproducible and modular environment definitions across various hosts and services.

A DAWO community project.

Notice

DAWO Core has moved from https://code.overheid.nl to Codeberg to facilitate community collaboration.

Backup copies are available on:

Contributing

See CONTRIBUTING.md.

Key Concepts

  • Flakes: The foundation of the repo, used for pinning inputs and defining outputs.
  • Modules: The primary way configurations are organized, allowing for composable building blocks.
  • Multi-Tenancy: Specifically designed to handle diverse roles, from desktops to core services.

Entry Points

  • flake.nix - The primary build entry point and input definitions.
  • modules/ - The directory containing all modular configurations.

High-Level Architecture

See architecture.md.

Pitfalls

Things that cost somebody hours: docs/pitfalls.md. Read it before debugging CI, a comin device, or anything that reports success while being wrong.

Module Map

Module Purpose
boot Bootloader and initial kernel parameters.
desktops GUI environments and workspace setups.
environment Global environment variables, apps and shell configurations.
hardware Platform-specific machine hardware definitions.
hardening Security controls, and the rule register that selects them.
hosts The ultimate definition of specific server/client instances.
networking Network interfaces, WiFi, and VPN configurations.
nixos Core NixOS system-level overrides.
programs General software package management and configuration.
services Daemon processes and background services.
users User accounts, groups, and sudoer permissions.