Kong is a cloud-native, platform-agnostic API gateway built on OpenResty/Nginx. It provides traffic management, security, observability, and AI/LLM proxying capabilities through a plugin architecture. The system supports traditional, DB-less, and hybrid deployment modes, with an Admin API for configuration and Kong Manager for GUI-based management. Key features include load balancing, authentication, rate limiting, request/response transformation, and extensive observability integrations.
decK is a CLI tool for declarative configuration management of Kong API Gateway and Konnect SaaS. It enables users to manage Kong entities (services, routes, plugins, consumers, certificates, etc.) via YAML/JSON state files, supporting sync, diff, dump, apply, reset, and validate operations. The architecture is a single binary with multiple subcommands organized under `gateway`, `file`, `ai`, and `konnect` namespaces, built on top of Kong's go-database-reconciler library for state reconciliation. Key entry points include `main.go` (signal handling), `cmd/root.go` (Cobra CLI), and command handlers in `cmd/gateway_*.go`, `cmd/file_*.go`, and `cmd/ai_*.go`. Data flows involve reading declarative state files, fetching current state from Kong Admin API or Konnect, computing diffs, and applying CRUD operations. External dependencies include Kong Gateway (>=1.x), Kong Enterprise, Konnect, and various Go libraries for Kubernetes, Terraform, and AI Gateway integrations. The repository also includes converters for generating Kubernetes Ingress Controller manifests (`kong2kic`), Terraform resources (`kong2tf`), and version migration rulesets (`convert/`).
OpenClaw is a Nix flake that packages the OpenClaw AI assistant gateway for declarative installation on NixOS, macOS, and Home Manager. It provides a Home Manager module (programs.openclaw) and a NixOS module (services.openclaw-gateway) with options for instances, plugins, skills, workspace files, environment variables, and systemd/launchd services. The flake also includes an overlay, a Home Manager module for runtime plugins, and a set of Nix scripts that generate and validate plugin locks, config options, and runtime plugin materialization.
NixBSD is a declarative system configuration framework that ports NixOS infrastructure to BSD kernels (FreeBSD and OpenBSD). It functions as a complete operating system distribution definition, managing bootloaders, init systems, services, and user configurations through Nix expressions. The architecture is modular, leveraging the NixOS module system to define system state, with specific adaptations for BSD-specific tools like rc.d, jails, and ZFS. The system relies heavily on custom build logic to generate disk images, installers, and bootloader configurations that are compatible with BSD hardware constraints. It includes a portable init abstraction layer to unify service management across Linux, FreeBSD, and OpenBSD, though this introduces significant complexity. Security features like PAM, ACME certificates, and setuid wrappers are implemented as declarative modules. While the codebase demonstrates high craftsmanship in system integration and Nix expression patterns, it suffers from high technical drift due to the inherent divergence between NixOS (systemd-based) and BSD (rc-based) ecosystems. Upstream NixOS changes frequently require manual merging, and BSD-specific logic (e.g., initware, stand-freebsd) creates maintenance bottlenecks. It is a robust infrastructure tool for users requiring declarative BSD management but requires significant expertise to maintain.