0596f0d04d
Flake lock file updates:
• Updated input 'nix-index-database':
'github:Mic92/nix-index-database/469ef53571ea80890c9497952787920c79c1ee6e?narHash=sha256-Ad9Rd3ZAidrH01xP73S3CjPiyXo7ywZs3uCESjPwUdc%3D' (2025-11-16)
→ 'github:Mic92/nix-index-database/d7423982c7a26586aa237d130b14c8b302c7a367?narHash=sha256-NPyc76Wxmv/vAsXJ8F%2B/8fXECHYcv2YGSqdiSHp/F/A%3D' (2025-11-23)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/89c2b2330e733d6cdb5eae7b899326930c2c0648?narHash=sha256-Stk9ZYRkGrnnpyJ4eqt9eQtdFWRRIvMxpNRf4sIegnw%3D' (2025-11-17)
→ 'github:NixOS/nixpkgs/117cc7f94e8072499b0a7aa4c52084fa4e11cc9b?narHash=sha256-%2BhBiJ%2BkG5IoffUOdlANKFflTT5nO3FrrR2CA3178Y5s%3D' (2025-11-20)
• Updated input 'nur':
'github:nix-community/NUR/170747c350c8ef297830a74520390608810713e0?narHash=sha256-ujbiSdS06tCAP2E7o8Ed29ruXiSu8eyVeOs2/p8zg5k%3D' (2025-11-22)
→ 'github:nix-community/NUR/7344630b5fa20a0194c210d1feb1e16f78e0face?narHash=sha256-6fp7eDYpqJi%2BuAETcr/6a%2BgFUzwfXrJlyhVIlkyqV1Y%3D' (2025-11-23)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/89c2b2330e733d6cdb5eae7b899326930c2c0648?narHash=sha256-Stk9ZYRkGrnnpyJ4eqt9eQtdFWRRIvMxpNRf4sIegnw%3D' (2025-11-17)
→ 'github:nixos/nixpkgs/117cc7f94e8072499b0a7aa4c52084fa4e11cc9b?narHash=sha256-%2BhBiJ%2BkG5IoffUOdlANKFflTT5nO3FrrR2CA3178Y5s%3D' (2025-11-20)
• Updated input 'zig':
'github:mitchellh/zig-overlay/d6cab4065ca2569e9a72a2b26b6e532540a69711?narHash=sha256-Zte9milzFT7tnsxlNjyj6CeR1OfRpERX8beUObMSAyc%3D' (2025-11-22)
→ 'github:mitchellh/zig-overlay/d9f4467654a4ea3e28ac648bfea8036f1432a810?narHash=sha256-VrYBPwaEjL2DCUEnXIWE5ZPkq5HDqbklOjjAmzVMcK4%3D' (2025-11-23)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
$ nix why-depends .#nixosConfigurations.vno1-gdrx.config.system.build.toplevel .#legacyPackages.x86_64-linux.mbedtls_2
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2