208b96cc15
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/1eec32f0efe3b830927989767a9e6ece0d82d608?narHash=sha256-3MmiUN/jOHBHQUnjqzg6qKArc17j2OS6jisEppDY4g8%3D' (2025-05-15)
→ 'github:nix-community/home-manager/d5f1f641b289553927b3801580598d200a501863?narHash=sha256-ypL9WAZfmJr5V70jEVzqGjjQzF0uCkz%2BAFQF7n9NmNc%3D' (2025-05-19)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/e81fd167b33121269149c57806599045fd33eeed?narHash=sha256-L3clA5YGeYCF47ghsI7Tcex%2BDnaaN/BbQ4dR2wzoiKg%3D' (2025-05-13)
→ 'github:NixOS/nixos-hardware/220761ec01c4e0c5ad3562fe50d45ee5c89e3d5a?narHash=sha256-domY8jhuiTYRfmhYvgqNR5SnQyTfX17s5NzuCtj1FtY%3D' (2025-05-20)
• Updated input 'nur':
'github:nix-community/NUR/f01c6fc97f137be5d772cc8ecb2593dc7ee5b397?narHash=sha256-oWcFayJzIRSGJGMO6hvpHsI8Q7vGmFbdPXpuRP6XEZA%3D' (2025-05-19)
→ 'github:nix-community/NUR/7c239259399ed5f628fc1ebde14d63e346f0ea72?narHash=sha256-bJI/Plr7k6MhlRBBDl6eeV2QxK0%2BjmuHlREz4Wrbc08%3D' (2025-05-20)
• Updated input 'zig':
'github:mitchellh/zig-overlay/1189a26ccb4a7090b1c602713959e31cc14273cc?narHash=sha256-AkQYAESfWODzPWEQWJB/hX78fcJt2dSqDQzTCPJbrdo%3D' (2025-05-18)
→ 'github:mitchellh/zig-overlay/144ac192cb6ff30331fb1de0fd67c8fafaa1e8e1?narHash=sha256-QRK9fn%2Bk4iNucwrj7dCMWzNuMzd05gu4Ywmbdgszgfc%3D' (2025-05-20)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2