1.8 KiB
AZ-NIX-CLIENTS
A NixOS flake that manages AzIntec client hosts. Two host species live in this
repo: developer workstations (e.g. AZ-LT-NIX) and the thin-client fleet
(AZ-TC-NN).
Language
Thin Client:
A NixOS client host in the AZ-TC-NN fleet — a mini-PC running KDE Plasma that
authenticates against Active Directory, provides a pre-configured RDP shortcut
to a terminal server, and runs a pinned browser for one web app. Replaces a
Windows 11 workstation.
Avoid: kiosk, terminal, workstation
Workstation:
A NixOS host used for interactive development work (e.g. AZ-LT-NIX). Not a
Thin Client — these hosts use the m3ta-home profile system and are not in the
production fleet.
Avoid: desktop, laptop, client
Terminal Server: The remote Windows RDS host (or farm) that Thin Clients connect to via RDP. Kerberos SSO is expected to flow from the client login to this server. Avoid: RDP server, remote desktop, RD server
Web App: The single browser-based application that Thin Clients open at session start. Kerberos SSO is expected for this app. Avoid: portal, intranet, app
Domain User:
An identity provided by Active Directory via sssd. Logs into the Thin Client
at the SDDM login screen; credentials flow to RDP and the web app via Kerberos.
Avoid: AD user, network user, SSO user
Hardware Class: One of the 2–3 mini-PC SKUs the fleet is composed of (e.g. Dell OptiPlex Micro, Lenovo ThinkCentre Tiny). Each class has its own hardware module under the thin-client role. Avoid: SKU, model, hardware type
Fleet Host:
A single physical Thin Client, identified by AZ-TC-NN (two-digit number).
Each fleet host has a tiny default.nix that imports the thin-client role and
declares its hardware class and hostname.
Avoid: node, device, machine