Sinity/sinnix

Sinnix is the NixOS and Home Manager configuration for a personal workstation,
a headless replica, and an OpenWrt router. It versions desktop behavior,
services, storage, recovery, capture, and coding-agent tools together.
Hardware, paths, secrets, and policy are specific to this environment; adapt
these sources before using them elsewhere.
## Hosts and capabilities
| Host | Role |
| sinnix-prime | Hyprland and Noctalia desktop, development, capture, local AI, storage, and backups |
| sinnix-ethereal | Headless NixOS server with declarative storage and Tailscale |
| sinnix-gw | OpenWrt router with generated UCI configuration, deployment, and health checks |
The workstation includes NVIDIA and Intel GPU modes, audio and media tools,
terminal recording, and browser and desktop control. Home Manager out-of-store
links make user configuration edits available without a rebuild.
Sinnix deploys Sinex (event capture and processing) on the workstation,
Polylogue (AI conversation archives), and Lynchpin (cross-source analysis).
ActivityWatch, telemetry, shell history, and terminal recording supply additional
host context. Each data project owns its databases, provenance, and product
rules. Sinnix owns their service wiring, resources, paths, secrets, and recovery.
Private captures, reports, notes, and secrets remain outside the checkout.
## Repository map
| Path | Purpose |
| flake.nix | Inputs and flake-parts composition |
| flake/ | Host construction, packages, overlays, checks, development commands, and router outputs |
| hosts/ | Host roles, hardware, and settings |
| modules/ | Platform policy, default-on features, default-off services, profiles, and factories |
| dots/ | Home Manager configuration, shared agent instructions and skills, client settings and hooks |
| scripts/ | Small packaged tools with declared runtime dependencies |
| pkgs/ | Larger packages and test suites for scripts |
| docs/ | Subsystem behavior and bootstrap guides |
modules/default.nix discovers the module tree. Host files choose enabled
roles and settings; profiles supply workstation and cloud defaults.
## Runtime and recovery
Runtime declarations name systemd units, resource classes, failure monitoring,
and capture outputs. Modules apply resource defaults to units and export their
inventory to /etc/sinnix/runtime-inventory.json for telemetry and inspection.
sinnix-observe inspects live state. Evaluation checks include duplicate unit
identities, duplicate capture names and paths, and unapplied service resource
classes. Named AgentCTL operations schedule heavy and recurring work. Rebuild
commands share a lock to prevent competing system builds.
Login sessions and the user manager put temporary work on NVMe at
TMPDIR=/realm/tmp/work; /tmp is a small tmpfs and remains the default for
system services. sinnix-tmp-sweep removes unused nix-shell. and
nix-develop- directories every fifteen minutes.
The filesystem separates projects, personal data, service state, staging,