Repository navigation
Local Packages
Local derivations live beside their Home Manager module and are exposed through the overlay in flake.nix. They use release pins for architecture-specific URLs and hashes where upstream publishes binary archives.
| Package | Platforms | Purpose and caveat |
|---|---|---|
| agent-access | Linux and Darwin | Bitwarden Agent Access CLI/SDK from official prebuilt archives |
| albert-darwin | Apple Silicon macOS | Albert built from unstable nixpkgs with Darwin and Qt path fixes |
| cida-darwin | Apple Silicon macOS | Notarized Cida DMG repack for translation and text polishing |
| clash-verge-rev-darwin | Intel and Apple Silicon macOS | Official Clash Verge Rev DMG repack used for the configured proxy |
| digup-darwin | Apple Silicon macOS | DigUp 0.6.1 DMG repack for on-device content search |
| ego-lite-darwin | Intel and Apple Silicon macOS | Official browser app repack; wrapper prefers a writable installed bundle for its updater |
| jetbrains-air-darwin | Apple Silicon macOS | JetBrains Air DMG extraction using 7-Zip |
| obs-studio-darwin | Intel and Apple Silicon macOS | Official OBS repack; its virtual-camera system extension requires /Applications |
| pulsar-darwin | Apple Silicon macOS | Official Pulsar release repack with PULSAR_PATH wrapper support |
| scroll-reverser | Platform supplied by nixpkgs | Removes AppleDouble sidecars from the nixpkgs bundle to preserve its code seal |
Most app derivations use stdenvNoCC, fetchurl, and lib/release-pin.nix. The pin records the version, source URL, supported systems, and hash. Official DMGs or archives are unpacked, copied into $out/Applications, and generally left unpatched to preserve vendor signatures and notarization.
The DigUp derivation mounts its DMG with macOS hdiutil, copies DigUp.app, and does not build or fix up the binary. Its pin currently contains an aarch64-Darwin hash, so it is unavailable on Intel macOS.
Local app bundles are copied by Home Manager after installation. System-extension apps are routed to /Applications; OBS and Tailscale depend on that placement. Ad-hoc-signed bundles can be re-signed by the macOS activation with the local dotnix local code signing identity so privacy grants survive rebuilds. Binary-native packages remain tied to the upstream release assets listed in their pin files.
Made with love ❤️