Host-managed NixOS LXC containers for Proxmox.
Public alpha: proxnix is pre-1.0 infrastructure software. The CLI, desktop Manager, hosted Manager Web, and NixOS deployment module are ready for early testers, but interfaces and operational defaults may still change. Use a lab or non-critical deployment first, and put Manager Web behind a trusted auth proxy for any shared access.
Proxnix turns Proxmox container metadata and host-side Nix modules into a staged NixOS configuration that is copied into the guest at boot. The guest then applies that configuration only when the managed config hash changes.
This repository is the install/bootstrap layer. It owns the shared hooks,
helpers, and baseline Nix modules. Site-specific data is meant to live in a
separate workstation-owned site repo and gets published into /var/lib/proxnix/
on each Proxmox node as a relay cache.
For host installs, the preferred distribution path is the helper-script style
entrypoint under host/remote/, which installs the published proxnix-host
Debian package for you. The .deb remains the underlying package-managed
upgrade and uninstall path.
host/contains the Proxmox host layer, with stable installer entrypoints plus groupedruntime/,deploy/,packaging/,remote/, andextras/sources.workstation/contains the workstation-authoritative CLI, TUI, Proxnix Manager app, Nix flake, packaging scripts, and workstation module exports.docs/contains shared human-facing documentation.
- Proxmox-first networking and SSH key management
- Host-rendered NixOS config for each container
- Native NixOS services and Nix-authored container workloads
- SOPS + age secrets that work for both native services and containers
- Shared admin user with password-hash-from-secret support
- Small operational helpers for health checks, publishing, and secrets
Full documentation lives under docs/. Start there.
If you use MkDocs, mkdocs.yml is included so the docs render as a small documentation site.
See the full installation guide and first container walkthrough for the complete setup path, including secrets, admin user passwords, and workstation configuration.
Proxnix is released under the MIT License. See LICENSE for details.