Doug Masiero

Hi, I'm Doug. I use NixOS as the operating system for my daily machines and as the way I reason about them. Their configuration lives in renix, a private Gitea-backed flake that builds x86_64 and ARM Linux machines plus a nix-darwin VM from the same tree.

I prefer systems that can be read, rebuilt, and rolled back. Shared NixOS and Home Manager modules define Sway, fish, SSH, packages, certificates, VPN access, and user services. Host modules contain the hardware-specific exceptions instead of letting those exceptions leak into every machine.

Most work moves between nixnode, a ThinkPad running Sway, and nextgate, a Ryzen and NVIDIA workstation. OpenVPN reaches the private network, tssh keeps the SSH session usable while roaming, and Herdr holds the terminal workspaces on the other end.

The rest of the stack is deliberately ordinary: Alpine Linux and libvirt for service VMs, Docker at application boundaries, TrueNAS and encrypted ZFS for storage, and Ansible where Nix is not the right fit. Local model inference runs on this infrastructure, but it is a workload rather than the organizing idea.