Skip to main content
Determinate Systems logo
FlakeHub

Privately cache Nix artifacts and share flakes

FlakeHub is an all-in-one platform for Nix and flakes. Binary caching, private flakes, and org-wide access control backed by federated authentication. Publish, discover, and depend on Nix flakes with real semantic versioning.

Sign up (opens in a new tab)Read the docs (opens in a new tab)
Sign up: FlakeHub Cache

FlakeHub Cache

Share cached binary artifacts across developer machines, CI, and production. Never rebuild what's already been built and save massively on time and resources.
Sign up (opens in a new tab)
Docs: Private flakes

Private flakes

Keep proprietary packages private. Only authenticated members of your organization with explicit access can fetch them.
Docs (opens in a new tab)
Docs: Semantic versioning

Semantic versioning

Give your flakes real version numbers. Pin to majors, minors, or exact releases, not Git refs.
Docs (opens in a new tab)
Docs: JWT-based authentication

JWT-based authentication

No static credentials, no rotation schedules. FlakeHub uses JSON Web Tokens from GitHub, GitLab, Semaphore, Buildkite, AWS STS, Google Cloud Platforms, and others.
Docs (opens in a new tab)
Docs: Resolved store paths

Resolved store paths

FlakeHub pre-resolves Nix store paths so that you can fetch artifacts via the FlakeHub CLI without running a local Nix evaluation, leading to much faster deploys, especially on memory-constrained devices.
Docs (opens in a new tab)
fh docs: Flake discovery

Flake discovery

Browse and search thousands of community flakes by name, label, or organization. Works from the UI (⌘K) and the fh CLI.
fh docs (opens in a new tab)

Organization controls

Teams, roles, and access control. Manage publishing permissions and cache access across your whole organization from one place.
Docs: fh apply

fh apply

Deploy NixOS, Home Manager, and nix-darwin configurations directly from FlakeHub with no Nix evaluation required.
Docs (opens in a new tab)
Learn more: Multiple identity providers

Multiple identity providers

Authenticate with GitHub, Microsoft Entra, or Okta. Additional identity providers available on request for organizations with specific requirements.
Learn more
FedRAMP: FedRAMP High Authorization

FedRAMP High Authorization

Because FlakeHub has achieved FedRAMP Authorization, U.S. federal agencies and their partners can cache and distribute Nix artifacts inside the FedRAMP boundary.
FedRAMP
determinate

The Determinate platform

Determinate Nix, FlakeHub, and Determinate Secure Packages are built to work together. Keep exploring what else the platform can do.