28c4a5d1f8
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/15c5f9d04fabd176f30286c8f52bbdb2c853a146?narHash=sha256-24N3NAuZZbYqZ39NgToZgHUw6M7xHrtrAm18kv0%2B2Wo%3D' (2025-03-31)
→ 'github:nix-community/home-manager/a9f8b3db211b4609ddd83683f9db89796c7f6ac6?narHash=sha256-2lDQBOmlz9ggPxcS7/GvcVdzXMIiT%2BPpMao6FbLJSr0%3D' (2025-04-04)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/44a69ed688786e98a101f02b712c313f1ade37ab?narHash=sha256-vXiKURtntURybE6FMNFAVpRPr8%2Be8KoLPrYs9TGuAKc%3D' (2025-04-02)
→ 'github:NixOS/nixpkgs/bdb91860de2f719b57eef819b5617762f7120c70?narHash=sha256-s1KLDALEeqy%2BttrvqV3jx9mBZEvmthQErTVOAzbjHZs%3D' (2025-04-03)
• Updated input 'nur':
'github:nix-community/NUR/a38bb37f72ac6f4e5b8d3a5e7dcc87499238feb9?narHash=sha256-m2hEv0YzNbhK%2BTBBC46%2BpQkMWn4aiRHTDfbBS4lkf3g%3D' (2025-04-04)
→ 'github:nix-community/NUR/463c219abd888bcc4a8976d92cab28c1e3effba7?narHash=sha256-um8Xw61KLc5SYazZjYpIv2PYVJZPRA6f7Z%2BJ/J99wg4%3D' (2025-04-05)
• Updated input 'zig':
'github:mitchellh/zig-overlay/bf7bff4a16c3fd8dbf15d59dd390e142d2d5144b?narHash=sha256-qpdyHe652tmKegJxAcnTluxmNV8DBLq6u09w/sJVt98%3D' (2025-04-04)
→ 'github:mitchellh/zig-overlay/b6a163931e8d879fd8f93b7f533d29f10a5a6b9c?narHash=sha256-DR8Vjq8r32pZeJDMjyoL5G2QY1IZiyRBFMcq8yeEqWk%3D' (2025-04-05)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2