make this a configuration directory

.envrc

@@ -0,0 +1,7 @@
+_gpgconv="gpg2 -d --quiet --yes --compress-algo=none --no-encrypt-to"
+if [ "$(git config diff.gpg.textconv)" != "$_gpgconv" ]; then
+    git config diff.gpg.binary true
+    git config diff.gpg.textconv "$_gpgconv"
+fi
+
+export PASSWORD_STORE_DIR=$PWD/secrets

.gitignore

@@ -0,0 +1 @@
+/result

krops.nix

@@ -0,0 +1,22 @@
+let
+  krops = builtins.fetchGit {
+    url = "https://cgit.krebsco.de/krops/";
+  };
+  lib = import "${krops}/lib";
+  pkgs = import "${krops}/pkgs" {};
+
+  source = lib.evalSource [
+    {
+      nixpkgs.symlink = "/root/.nix-defexpr/channels/nixos";
+      nixos-config.file = toString ./configuration.nix;
+    }
+  ];
+
+in {
+  hel1a = pkgs.krops.writeDeploy "deploy-hel1a" {
+    source = source;
+    target = lib.mkTarget "motiejus@hel1-a.jakstys.lt" // {
+      sudo = true;
+    };
+  };
+}