The tools you will hear about.
Spend a week in Nix forums and the same project names come up: something for your dotfiles, something for secrets, something to deploy the second machine. This page groups them by job.
No ranking and no star counts. Each entry says who maintains it, so you can read their governance and decide for yourself.
Start from the source.
Everything below builds on these repositories. Nix is the package manager and language; Nixpkgs holds the package collection and NixOS itself.
Everyday and workstation
Home Manager
nix-communityManages dotfiles, user packages and per-program settings with the same module system NixOS uses. Works on NixOS, other Linux distributions and macOS.
nh
nix-communityA front end for rebuilding NixOS or Home Manager and for garbage collection. It shows what will change before switching.
nix-index-database
nix-communityA prebuilt database for nix-index, so
nix-locatecan tell you which package ships a file without indexing Nixpkgs on your own machine.nix-direnv
nix-communityLoads a project’s Nix shell when you enter its directory, and caches the result so the environment is not re-evaluated every time.
nix-output-monitor
Independent FOSSPipe a build through
nomand you get a tree of what is building, downloading and waiting, with timings, in place of a wall of log lines.
System and machine configuration
nixos-hardware
Official NixOSNixOS modules for specific laptops, boards and peripherals: firmware, kernel options and known quirks, collected per device.
disko
nix-communityDeclares partitions, filesystems, LUKS and RAID layouts in Nix and can apply them during installation.
impermanence
nix-communityFor systems whose root filesystem is wiped at boot. You list the files and directories that should persist; everything else goes.
sops-nix
Independent FOSSDecrypts secrets managed with sops (age, GPG or cloud KMS) during activation, so the encrypted files can live in your configuration repository.
agenix
Independent FOSSEncrypts secrets with age to each machine’s SSH host key and decrypts them on that machine. Smaller in scope than sops-nix.
Stylix
nix-communityApplies one colour scheme, wallpaper and set of fonts across many applications through NixOS and Home Manager modules.
NixVim
nix-communityConfigures Neovim, its plugins and language servers through Nix modules instead of Lua files.
Development
flake-parts
Independent FOSSWrites flake outputs with the module system, so per-system boilerplate becomes options you set once.
treefmt-nix
Independent FOSSDeclares every formatter a repository uses in one place and exposes them as
nix fmtand a flake check.git-hooks.nix
Independent FOSSFormerly pre-commit-hooks.nix. Declares git hooks in Nix, installs them in the development shell and can run the same hooks in CI.
devenv
Independent FOSSProject environments in a
devenv.nixfile: languages, services such as PostgreSQL, and long-running processes, built on Nix.nixd
nix-communityA language server that evaluates Nix code to offer completion and option documentation, including NixOS and Home Manager options.
Noogle
nix-communitySearch for Nix functions in
builtinsandlib, with their type signatures and documentation.
Deployment, builds and caches
nixos-anywhere
nix-communityInstalls NixOS over SSH onto a machine running another Linux, using kexec and disko to partition the disks.
deploy-rs
Independent FOSSDeploys NixOS systems and other Nix profiles over SSH. If the new generation cuts off the connection, it rolls back.
Colmena
nix-communityDeploys a fleet of NixOS machines from one description, building and pushing to hosts in parallel. Moved from zhaofengli/colmena.
Attic
Independent FOSSA self-hosted binary cache server with S3-compatible storage, multiple tenants and deduplication. Its own README describes it as an early prototype.
Hydra
Official NixOSThe continuous integration system that builds Nixpkgs and NixOS channels. You can also run your own instance.
Hosted services
Listed apart because a company runs the service. Open-source client code does not make the service community-governed.
Cachix
Hosted serviceA commercial hosted binary cache. The command-line client is open source; the service is run by the Cachix company, not by a community organisation.
Who maintains what.
Official NixOS projects live in the NixOS GitHub organisation. nix-community is a separate organisation that gives popular projects shared maintenance and continuity. Independent FOSS means an individual or company maintains the project under an open-source licence.
Governance and codes of conduct differ between them. Read each project’s own pages; this list does not claim any of them follow the NixOS Foundation’s policies.