Deployerbot Main f955512b35 flake.lock: Update
Flake lock file updates:

• Updated input 'home-manager':
    'github:nix-community/home-manager/0d782ee42c86b196acff08acfbf41bb7d13eed5b?narHash=sha256-3iVX1%2B7YUIt23hBx1WZsUllhbmP2EnXrV8tCRbLxHc8%3D' (2026-02-05)
  → 'github:nix-community/home-manager/cb6c151f5c9db4df0b69d06894dc8484de1f16a0?narHash=sha256-EDLi%2BYAsEEAmMeZe1v6GccuGRbCkpSZp/%2BA6g%2BpivR8%3D' (2026-02-22)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/c217913993d6c6f6805c3b1a3bda5e639adfde6d?narHash=sha256-D1PA3xQv/s4W3lnR9yJFSld8UOLr0a/cBWMQMXS%2B1Qg%3D' (2026-02-20)
  → 'github:NixOS/nixpkgs/afbbf774e2087c3d734266c22f96fca2e78d3620?narHash=sha256-nhZJPnBavtu40/L2aqpljrfUNb2rxmWTmSjK2c9UKds%3D' (2026-02-21)
• Updated input 'nur':
    'github:nix-community/NUR/577f21345d4820286b66f41cc03d32cc6b3e111e?narHash=sha256-ZZgEw37t6zyuc1ZOY%2B2/AdkgVaPDlGGpwiyK66bbzOc%3D' (2026-02-22)
  → 'github:nix-community/NUR/954d2e6ebfd6865e2b3a0bae942ef540ead1af50?narHash=sha256-tAt94LiGIAEjzalD44QFdd7jSmiAjtTd/I4/keMUe/U%3D' (2026-02-23)
2026-02-23 07:00:22 +00:00
2026-02-20 12:16:08 +02:00
2026-02-20 17:45:49 +02:00
2026-02-20 12:01:47 +02:00
2026-02-20 16:53:26 +02:00
2026-01-28 20:34:48 +00:00
2025-12-07 19:19:15 +02:00
2026-02-19 20:36:16 +00:00
2024-03-10 17:20:09 +02:00
2026-02-20 12:16:08 +02:00
2026-02-10 07:15:42 +00:00
2026-02-23 07:00:22 +00:00
2026-02-20 17:46:11 +02:00
2024-01-15 18:18:45 +02:00
2026-02-09 12:30:02 +00:00
2025-12-07 19:19:15 +02:00

Config

Flakes:

$ deploy --interactive '#fwminex'

$ nix build .#deploy.nodes.fra1-c.profiles.system.path

Other:

$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
$ nix why-depends .#nixosConfigurations.vno1-gdrx.config.system.build.toplevel .#legacyPackages.x86_64-linux.mbedtls_2

Encoding host-only secrets

Encode a secret on host:

rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext

Decode a secret on host (to test things out):

rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age

Borg

BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2

netboot

  1. dmesg | grep enp0 <- find the usb interface
  2. Disable power saving: echo -1 | sudo tee /sys/bus/usb/devices/2-1/power/autosuspend.

Testing netboot

sudo ip tuntap add dev tap0 mode tap user "$USER"
sudo ip link set dev tap0 up
sudo ip link set dev tap0 master br0
sudo brctl addif br0 tap0

efi:

qemu-system-x86_64 \
    -enable-kvm \
    -cpu host \
    -smp 4 \
    -m 1024 \
    -netdev tap,id=net0,ifname=tap0,script=no,downscript=no \
    -device e1000,netdev=net0 \
    -boot order=n \
    -bios $(nix build .#nixosConfigurations.mtworx.pkgs.OVMF.fd --no-link --print-out-paths)/FV/OVMF.fd

bios:

qemu-system-x86_64 \
    -enable-kvm \
    -cpu host \
    -smp 4 \
    -m 8192 \
    -netdev tap,id=net0,ifname=tap0,script=no,downscript=no \
    -device e1000,netdev=net0 \
    -boot order=n
Description
My configuration. Probably nothing to look for here.
Readme 6.6 MiB
Languages
Nix 81.6%
Lua 10.1%
Shell 3.4%
Go 3.1%
Vim Script 0.9%
Other 0.9%