0872692bdd
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/9a094440e02a699be5c57453a092a8baf569bdad?narHash=sha256-Vp9K5ol6h0J90jG7Rm4RWZsCB3x7v5VPx588TQ1dkfs%3D' (2025-09-14)
→ 'github:NixOS/nixpkgs/e9b7f2ff62b35f711568b1f0866243c7c302028d?narHash=sha256-uLwwHFCZnT1c3N3biVe/0hCkag2GSrf9%2BM56%2BOkf%2BWY%3D' (2025-09-17)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/c23193b943c6c689d70ee98ce3128239ed9e32d1?narHash=sha256-hLEO2TPj55KcUFUU1vgtHE9UEIOjRcH/4QbmfHNF820%3D' (2025-09-13)
→ 'github:NixOS/nixpkgs/8d4ddb19d03c65a36ad8d189d001dc32ffb0306b?narHash=sha256-qqIJ3yxPiB0ZQTT9//nFGQYn8X/PBoJbofA7hRKZnmE%3D' (2025-09-16)
• Updated input 'nur':
'github:nix-community/NUR/af8dcc2b544e2cefa9087fb53687d2ef07c6f8a2?narHash=sha256-z5TbUi9GFk9cMt%2BaE86bxxC8EiYvTZUzQP%2BfeqLih8M%3D' (2025-09-17)
→ 'github:nix-community/NUR/ccfb1478d48514e7bd2c61cdc0d0bf51b0a5aca1?narHash=sha256-3E7TNF8%2BwjOZRn%2BkIlPnXkuejyjH9ldZTVoT3oZVWhM%3D' (2025-09-18)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/c23193b943c6c689d70ee98ce3128239ed9e32d1?narHash=sha256-hLEO2TPj55KcUFUU1vgtHE9UEIOjRcH/4QbmfHNF820%3D' (2025-09-13)
→ 'github:nixos/nixpkgs/8d4ddb19d03c65a36ad8d189d001dc32ffb0306b?narHash=sha256-qqIJ3yxPiB0ZQTT9//nFGQYn8X/PBoJbofA7hRKZnmE%3D' (2025-09-16)
• Updated input 'pre-commit-hooks':
'github:cachix/pre-commit-hooks.nix/302af509428169db34f268324162712d10559f74?narHash=sha256-4DpXmct/2rcLgScT1CXOLr0TUeIlrBB1rnFqCOf5MUw%3D' (2025-09-15)
→ 'github:cachix/pre-commit-hooks.nix/54df955a695a84cd47d4a43e08e1feaf90b1fd9b?narHash=sha256-ytw7ROXaWZ7OfwHrQ9xvjpUWeGVm86pwnEd1QhzawIo%3D' (2025-09-17)
• Updated input 'zig':
'github:mitchellh/zig-overlay/4a2ed3992aad13b8f18b7c6e247996b63ef6226b?narHash=sha256-1RFpSkciv6rf0gSQ3pbWsJtXR8X/8bLXk8KBKjVjeMs%3D' (2025-09-17)
→ 'github:mitchellh/zig-overlay/481ccf0f2b732488239c6b417411c953d7a63e2b?narHash=sha256-JqcJ9%2BEIp4/9VBPMkgd6/kalIvKsFcZ0Yi2jj2wicFs%3D' (2025-09-18)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2