2e9d4032cc
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/f21d9167782c086a33ad53e2311854a8f13c281e?narHash=sha256-K6PEI5PYY94TVMH0mX3MbZNYFme7oNRKml/85BpRRAo%3D' (2025-09-14)
→ 'github:nix-community/home-manager/6f656618ebc71ca82d93d306a8aecb2c5f6f2ab2?narHash=sha256-SsI6INUzWwPcRKRaxvi50RttnD9rcC4EjV%2B67TOEfrQ%3D' (2025-09-19)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/e9b7f2ff62b35f711568b1f0866243c7c302028d?narHash=sha256-uLwwHFCZnT1c3N3biVe/0hCkag2GSrf9%2BM56%2BOkf%2BWY%3D' (2025-09-17)
→ 'github:NixOS/nixpkgs/d2ed99647a4b195f0bcc440f76edfa10aeb3b743?narHash=sha256-h1BW2y7CY4LI9w61R02wPaOYfmYo82FyRqHIwukQ6SY%3D' (2025-09-18)
• Updated input 'nur':
'github:nix-community/NUR/0c542bbbd8fe18b031fd8587c891b793647472b8?narHash=sha256-YLN5VffDP1rGpJUUAJOPPgLNOQ9H6tdezWJKgs2JiqU%3D' (2025-09-19)
→ 'github:nix-community/NUR/9ea2a0faddc79c2bf04a4cdc480ff7237f266f82?narHash=sha256-IDI/9/H9WW%2B%2BsihlB7jyBetLUvqU0GBnZv0Od5D/nzA%3D' (2025-09-20)
• Updated input 'zig':
'github:mitchellh/zig-overlay/9e7eee03a848dffc4a0507469e87996499dc2b3c?narHash=sha256-s22YyKdKdkJUDxAGVMdxpdL2kZRKUakLymnlepU3qUc%3D' (2025-09-19)
→ 'github:mitchellh/zig-overlay/22443e32be59bbf9b165faafa9781272387f3096?narHash=sha256-BU7R%2BrjktKrkVisagXzgoyhLKVyrHxOjFCNQ8naOSnk%3D' (2025-09-19)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2