2e74e1b61d
Flake lock file updates:
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/9da7f1cf7f8a6e2a7cb3001b048546c92a8258b4?narHash=sha256-SlybxLZ1/e4T2lb1czEtWVzDCVSTvk9WLwGhmxFmBxI%3D' (2025-11-11)
→ 'github:NixOS/nixpkgs/c5ae371f1a6a7fd27823bc500d9390b38c05fa55?narHash=sha256-4PqRErxfe%2B2toFJFgcRKZ0UI9NSIOJa%2B7RXVtBhy4KE%3D' (2025-11-12)
• Updated input 'nur':
'github:nix-community/NUR/a096356c3fbd1eb83b4158a0806ad38e5715c2b8?narHash=sha256-EURf49/tod3CQV9wWvMAJCswJSuW25KcqJUU25uL7CA%3D' (2025-11-13)
→ 'github:nix-community/NUR/3f88d4e8f330dd9f89937855ddd1168130cfaf7c?narHash=sha256-I08YV5fkB7csLog%2BtC4a79cp%2B55/NigfE39g6Ytzw90%3D' (2025-11-14)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/9da7f1cf7f8a6e2a7cb3001b048546c92a8258b4?narHash=sha256-SlybxLZ1/e4T2lb1czEtWVzDCVSTvk9WLwGhmxFmBxI%3D' (2025-11-11)
→ 'github:nixos/nixpkgs/c5ae371f1a6a7fd27823bc500d9390b38c05fa55?narHash=sha256-4PqRErxfe%2B2toFJFgcRKZ0UI9NSIOJa%2B7RXVtBhy4KE%3D' (2025-11-12)
• Updated input 'pre-commit-hooks':
'github:cachix/pre-commit-hooks.nix/c5c3147730384576196fb5da048a6e45dee10d56?narHash=sha256-QqS72GvguP56oKDNUckWUPNJHjsdeuXh5RyoKz0wJ%2BE%3D' (2025-11-11)
→ 'github:cachix/pre-commit-hooks.nix/84255025dee4c8701a99fbff65ac3c9095952f99?narHash=sha256-M%2B2QBQoC0lzkCdUQRXylR2RkcT6BCRfW3KDs%2Bc/IGLw%3D' (2025-11-13)
• Updated input 'zig':
'github:mitchellh/zig-overlay/d16453ee78765e49527c56d23386cead799b6b53?narHash=sha256-VNW/%2BVYIg6N4b9Iq%2BF0YZmm22n74IdFS7hsPLblWuOY%3D' (2025-11-12)
→ 'github:mitchellh/zig-overlay/b253aba51b380bb9e229b033c6e9251350a036f6?narHash=sha256-jI4s1W97XyMEEoePnknrSzzjaq1aHvt6/P5Oj5xJAxY%3D' (2025-11-14)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
$ nix why-depends .#nixosConfigurations.vno1-gdrx.config.system.build.toplevel .#legacyPackages.x86_64-linux.mbedtls_2
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2