0e6bd10edf
Flake lock file updates:
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/61837d2a33ccc1582c5fabb7bf9130d39fee59ad?narHash=sha256-ynqbgIYrg7P1fAKYqe8I/PMiLABBcNDYG9YaAP/d/C4%3D' (2025-06-16)
→ 'github:NixOS/nixos-hardware/1552a9f4513f3f0ceedcf90320e48d3d47165712?narHash=sha256-vnzzBDbCGvInmfn2ijC4HsIY/3W1CWbwS/YQoFgdgPg%3D' (2025-06-20)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/9ba04bda9249d5d5e5238303c9755de5a49a79c5?narHash=sha256-H8J4H2XCIMEJ5g6fZ179QfQvsc2dUqhqfBjC8RAHNRY%3D' (2025-06-18)
→ 'github:NixOS/nixpkgs/b2485d56967598da068b5a6946dadda8bfcbcd37?narHash=sha256-3vkjFnxCOP6vm5Pm13wC/Zy6/VYgei/I/2DWgW4RFeA%3D' (2025-06-20)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/9e83b64f727c88a7711a2c463a7b16eedb69a84c?narHash=sha256-v263g4GbxXv87hMXMCpjkIxd/viIF7p3JpJrwgKdNiI%3D' (2025-06-17)
→ 'github:NixOS/nixpkgs/08f22084e6085d19bcfb4be30d1ca76ecb96fe54?narHash=sha256-XE/lFNhz5lsriMm/yjXkvSZz5DfvKJLUjsS6pP8EC50%3D' (2025-06-19)
• Updated input 'nur':
'github:nix-community/NUR/258d603b4fb0faf3e252a10c2125ec3457ae056b?narHash=sha256-eZPmBlEaUVS2vRlIUKfsSu/0Jj6Qqpws4QEMnZkll4A%3D' (2025-06-20)
→ 'github:nix-community/NUR/c054de40fff38d5fe00ac533cff1e40ea307a61a?narHash=sha256-8uzVBdDzvDdJCVklh9vv2qab/ciysMehi5E7i%2ByZIjY%3D' (2025-06-21)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/9e83b64f727c88a7711a2c463a7b16eedb69a84c?narHash=sha256-v263g4GbxXv87hMXMCpjkIxd/viIF7p3JpJrwgKdNiI%3D' (2025-06-17)
→ 'github:nixos/nixpkgs/08f22084e6085d19bcfb4be30d1ca76ecb96fe54?narHash=sha256-XE/lFNhz5lsriMm/yjXkvSZz5DfvKJLUjsS6pP8EC50%3D' (2025-06-19)
• Updated input 'zig':
'github:mitchellh/zig-overlay/f69e9790793d81a8f32af8426008cb2a3871bad5?narHash=sha256-R7yDQlTHvARic5adjg7e/rT22m0mDME90mEgGM6thic%3D' (2025-06-20)
→ 'github:mitchellh/zig-overlay/46395c9ca7b1fa0989911f3023ede831849f5af0?narHash=sha256-FocUpVH8uxxyxUEVOrnUkyLi3psn%2BbMBZ%2ByDpkrYtew%3D' (2025-06-20)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2