incomplete-stack

A deliberately imperfect collection of configs, scripts, and system definitions for my evolving homelab machines — Samson (Ubuntu), Hiram (Debian), and Gödel (NixOS).

Inspired by Gödel’s Incompleteness Theorem, this repo embraces the idea that no system can ever be fully complete — and that’s part of the fun. This monorepo holds the moving pieces of a home infrastructure that grows, adapts, and stays intentionally unfinished.

---

Repo Layout

• nixos/flake.nix — NixOS flake (hosts, modules, profiles)
• nixos/hosts/ — per‑host configs (e.g., godel.nix)
• nixos/modules/ — reusable modules
  • profiles/ — package profiles (CLI/QoL, netops, containers, PHP, FP stack, k8s, VPN, etc.)
  • shell/p10k.nix — Powerlevel10k presets (minimal / richer)
• hosts/ — host‑specific docs, authorized keys, bootstrap assets
• docs/ — notes and long‑form docs

---

Quick Start (Gödel)

# From a Nix-enabled workstation
git clone <this-repo>
cd incomplete-stack
rsync -av --progress nixos/ <godel-ip>:.config/nixos-flake

# On Gödel to HEAD (via SSH or console)
ssh <godel-ip> nix flake check ~/.config/nixos-flake
ssh <godel-ip> nix flake update --flake ~/.config/nixos-flake
ssh <godel-ip> nixos-rebuild switch --flake ~/.config/nixos-flake#godel

Boot flow: initrd SSH is enabled for remote LUKS unlock. During early boot, you can connect to the initrd (port 2222) and enter the passphrase remotely.

Initrd SSH (remote unlock)

• Connect during stage‑1:
• If you prefer static addressing for initrd, set the ip=... kernel param in godel.nix. .local (mDNS) works only after the OS boots (Avahi in stage‑2). For stage‑1,
• use a static IP, a router DNS reservation, or a client /etc/hosts entry.

ssh -o RequestTTY=force -p 2222 root@<initrd-ip> systemd-tty-ask-password-agent --watch

# you'll see a cryptsetup passphrase prompt

Hosts

• Gödel
• Hiram
• Samson

Documentation

• Frankenstein
• Network
• Philosophy