2e38f80121
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/d49d2543f02dbd789ed032188c84570d929223cb?narHash=sha256-YmaYMduV5ko8zURUT1VLGDbVC1L/bxHS0NsiPoZ6bBM%3D' (2026-01-01)
→ 'github:nix-community/home-manager/7a06e8a2f844e128d3b210a000a62716b6040b7f?narHash=sha256-ONYqnKrPzfKEEPChoJ9qPcfvBqW9ZgieDKD7UezWPg4%3D' (2026-01-04)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/64049ca74d63e971b627b5f3178d95642e61cedd?narHash=sha256-yA/CuWyqm%2BAQo2ivGy6PlYrjZBQm7jfbe461%2B4HF2fo%3D' (2026-01-02)
→ 'github:NixOS/nixpkgs/30a3c519afcf3f99e2c6df3b359aec5692054d92?narHash=sha256-8IQQUorUGiSmFaPnLSo2%2BT%2BrjHtiNWc%2BOAzeHck7N48%3D' (2026-01-03)
• Updated input 'nur':
'github:nix-community/NUR/290bdd3c56efec8c7e9cc31e10b227b2968c1893?narHash=sha256-PWnJ87qkB2%2BykCRJy65yZooks4NETZR%2BS5rbxWeUdUU%3D' (2026-01-04)
→ 'github:nix-community/NUR/2a1df9ce99610dd5ee1a1e09f1222fb7586bbdd2?narHash=sha256-LuSe5aZbth1uE9C5NFL9zhqIkBoleL3g15TFRVn9JiU%3D' (2026-01-05)
• Updated input 'zig':
'github:mitchellh/zig-overlay/3f83708d754f667aea7d684e1c209582aa6cc209?narHash=sha256-/NPUfN1z61Vs5G%2B1C%2BZH4xEP%2BANuMPpqeT0ixmQl1pc%3D' (2026-01-04)
→ 'github:mitchellh/zig-overlay/501956cc4a633fdc744dc4cdd88ce12c65b7fc65?narHash=sha256-rNGKx9KO30dKt1wfpf6F0DrUaqp4jRZoqUi6%2BFy32yM%3D' (2026-01-05)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
$ nix why-depends .#nixosConfigurations.vno1-gdrx.config.system.build.toplevel .#legacyPackages.x86_64-linux.mbedtls_2
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2