diff --git a/default.nix b/default.nix
new file mode 100644
index 0000000..c38be65
--- /dev/null
+++ b/default.nix
@@ -0,0 +1,12 @@
+# We use top-level nix-flake, so default.nix is basically just a wrapper around ./flake.nix
+(import
+  (
+    let lock = builtins.fromJSON (builtins.readFile ./flake.lock); in
+    fetchTarball {
+      url = "https://git.pegasust.com/pegasust/boost/archive/${lock.nodes.boost.locked.rev}.tar.gz";
+      sha256 = lock.nodes.boost.locked.narHash;
+    }.flake-compat
+  )
+  { src = ./.; }
+).defaultNix
+
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 0000000..828b609
--- /dev/null
+++ b/flake.nix
@@ -0,0 +1,21 @@
+{
+  description = "Start your Nix cluster here";
+  nixConfig = {
+    accept-flake-config = true;
+    experimental-features = "nix-command flakes";
+    # for darwin's browser
+    allowUnsupportedSystem = true;
+  };
+  inputs = {
+    boost.url = "git+https://git.pegasust.com/pegasust/boost-nix.git";
+    flake-compat.url = "github:edolstra/flake-compat";
+  };
+
+  outputs = {boost, ...}@flakes: let
+    inherit (boost) lib overlays pkgs;
+    inherit (lib) forEachSystem stdx sys utils;
+  in utils.repos.mkConfigurations {
+    users = utils.user.mkConfigurations [];
+    hosts = utils.host.mkConfigurations [];
+  };
+}
diff --git a/secrets.nix b/secrets.nix
new file mode 100644
index 0000000..5f7e8e8
--- /dev/null
+++ b/secrets.nix
@@ -0,0 +1,12 @@
+# We use top-level nix-flake, so default.nix is basically just a wrapper around ./flake.nix
+(import
+  (
+    let lock = builtins.fromJSON (builtins.readFile ./flake.lock); in
+    fetchTarball {
+      url = "https://git.pegasust.com/pegasust/boost/archive/${lock.nodes.boost.locked.rev}.tar.gz";
+      sha256 = lock.nodes.boost.locked.narHash;
+    }.flake-compat
+  )
+  { src = ./.; }
+).result.secrets
+
diff --git a/shell.nix b/shell.nix
new file mode 100644
index 0000000..4c6ae8c
--- /dev/null
+++ b/shell.nix
@@ -0,0 +1,11 @@
+(import
+  (
+    let lock = builtins.fromJSON (builtins.readFile ./flake.lock); in
+    fetchTarball {
+      url = "https://git.pegasust.com/pegasust/boost/archive/${lock.nodes.boost.locked.rev}.tar.gz";
+      sha256 = lock.nodes.boost.locked.narHash;
+    }.flake-compat
+  )
+  { src = ./.; }
+).shellNix
+