nlewo/comin

Health v2 · maintenance only

Adoption not part of the score

1024 stars · 66 forks observed · 2026-09-23

What it is AI-extracted, prompt v1, taxonomy v1, 2026-09-07, confidence 0.95

Comin is a pull-mode GitOps deployment tool for NixOS (and nix-darwin) machines, running as a local daemon that polls Git repositories and deploys the matching machine configuration. It supports flake and non-flake repos, multiple remotes, testing branches, commit signature verification, and Prometheus metrics.

Use cases

• deploy NixOS configuration by pushing to a Git repository
• automatically pull and apply server config changes via GitOps
• test NixOS configuration changes on a branch before merging
• keep a laptop or server config in sync with a central Git repo
• avoid single point of failure by polling multiple Git remotes
• verify GPG or SSH signed commits before deploying

When to choose

• you manage NixOS or nix-darwin machines and want push-to-deploy GitOps without exposing SSH access
• your machines sit behind NAT or firewalls and cannot accept inbound deployment connections
• you want signed-commit verification and Prometheus observability built into deployment

When to avoid

• you deploy non-Nix systems or use Terraform/Ansible-style orchestration
• you need centralized CI/CD pipelines with build artifacts rather than local pull-based evaluation
• you require imperative multi-machine orchestration or one-off remote commands

Facets

cli-tool · maturity active

deployment ci-cd monitoring security infrastructure-as-code self-hosted go self-hosted gitops nixos pull-based-deployment nix nix-darwin systemd-service devops automation linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nlewo/comin")