154d095822
Flake lock file updates:
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/8d4ddb19d03c65a36ad8d189d001dc32ffb0306b?narHash=sha256-qqIJ3yxPiB0ZQTT9//nFGQYn8X/PBoJbofA7hRKZnmE%3D' (2025-09-16)
→ 'github:NixOS/nixpkgs/0147c2f1d54b30b5dd6d4a8c8542e8d7edf93b5d?narHash=sha256-7To75JlpekfUmdkUZewnT6MoBANS0XVypW6kjUOXQwc%3D' (2025-09-18)
• Updated input 'nur':
'github:nix-community/NUR/ccfb1478d48514e7bd2c61cdc0d0bf51b0a5aca1?narHash=sha256-3E7TNF8%2BwjOZRn%2BkIlPnXkuejyjH9ldZTVoT3oZVWhM%3D' (2025-09-18)
→ 'github:nix-community/NUR/0c542bbbd8fe18b031fd8587c891b793647472b8?narHash=sha256-YLN5VffDP1rGpJUUAJOPPgLNOQ9H6tdezWJKgs2JiqU%3D' (2025-09-19)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/8d4ddb19d03c65a36ad8d189d001dc32ffb0306b?narHash=sha256-qqIJ3yxPiB0ZQTT9//nFGQYn8X/PBoJbofA7hRKZnmE%3D' (2025-09-16)
→ 'github:nixos/nixpkgs/0147c2f1d54b30b5dd6d4a8c8542e8d7edf93b5d?narHash=sha256-7To75JlpekfUmdkUZewnT6MoBANS0XVypW6kjUOXQwc%3D' (2025-09-18)
• Updated input 'zig':
'github:mitchellh/zig-overlay/481ccf0f2b732488239c6b417411c953d7a63e2b?narHash=sha256-JqcJ9%2BEIp4/9VBPMkgd6/kalIvKsFcZ0Yi2jj2wicFs%3D' (2025-09-18)
→ 'github:mitchellh/zig-overlay/9e7eee03a848dffc4a0507469e87996499dc2b3c?narHash=sha256-s22YyKdKdkJUDxAGVMdxpdL2kZRKUakLymnlepU3qUc%3D' (2025-09-19)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2