1c24bdae31
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/02f2af8c8a8c3b2c05028936a1e84daefa1171d4?narHash=sha256-7PCBQ4aGVF8OrzMkzqtYSKyoQuU2jtpPi4lmABpe5X4%3D' (2025-04-01)
→ 'github:NixOS/nixpkgs/44a69ed688786e98a101f02b712c313f1ade37ab?narHash=sha256-vXiKURtntURybE6FMNFAVpRPr8%2Be8KoLPrYs9TGuAKc%3D' (2025-04-02)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/77b584d61ff80b4cef9245829a6f1dfad5afdfa3?narHash=sha256-bmEPmSjJakAp/JojZRrUvNcDX2R5/nuX6bm%2BseVaGhs%3D' (2025-03-31)
→ 'github:NixOS/nixpkgs/2c8d3f48d33929642c1c12cd243df4cc7d2ce434?narHash=sha256-F7n4%2BKOIfWrwoQjXrL2wD9RhFYLs2/GGe/MQY1sSdlE%3D' (2025-04-02)
• Updated input 'nur':
'github:nix-community/NUR/82e3947c924a0215eb3b377b85c945cf91da521f?narHash=sha256-nQ1hW49uAso6mPUv/5XnW8%2B/BlLGCUr9fTHvdE5sJ4k%3D' (2025-04-02)
→ 'github:nix-community/NUR/07d735d8331775bdec6e4eeb4fa03bd8ddce6f64?narHash=sha256-LRx5XYk7LacaJyOHvZGlZ4nL9skCfgupjA9ut0pFjc0%3D' (2025-04-03)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/77b584d61ff80b4cef9245829a6f1dfad5afdfa3?narHash=sha256-bmEPmSjJakAp/JojZRrUvNcDX2R5/nuX6bm%2BseVaGhs%3D' (2025-03-31)
→ 'github:nixos/nixpkgs/2c8d3f48d33929642c1c12cd243df4cc7d2ce434?narHash=sha256-F7n4%2BKOIfWrwoQjXrL2wD9RhFYLs2/GGe/MQY1sSdlE%3D' (2025-04-02)
• Updated input 'zig':
'github:mitchellh/zig-overlay/a81c2ca57a9e4b3ed8dbb66f26f4283ef00620a5?narHash=sha256-vCEJAJKoZe2h6GPy/hIpX%2BZ2Olsh7i0qgY4E3Re9iHM%3D' (2025-04-02)
→ 'github:mitchellh/zig-overlay/8e02139fc7ea43a53724712b01c485e9bfb8d884?narHash=sha256-dmn5lip2w8YzTXLIKiymqyMpD1lD6psCkXldQ2SYVmo%3D' (2025-04-03)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2