2f9e324260
Flake lock file updates:
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/0b4defa2584313f3b781240b29d61f6f9f7e0df3?narHash=sha256-Oncbh0UmHjSlxO7ErQDM3KM0A5/Znfofj2BSzlHLeVw%3D' (2025-10-09)
→ 'github:NixOS/nixpkgs/cf3f5c4def3c7b5f1fc012b3d839575dbe552d43?narHash=sha256-TK9Kr0BYBQ/1P5kAsnNQhmWWKgmZXwUQr4ZMjCzWf2c%3D' (2025-10-12)
• Updated input 'nur':
'github:nix-community/NUR/e90b6742ba9793697791823d226d78d200cf6eff?narHash=sha256-jyMJ2Wh17oxQrzOaQHySBmJmRvngQYz1/FHCcx8s7%2BI%3D' (2025-10-13)
→ 'github:nix-community/NUR/7e2b85da72150967bc4994a39d8902065db4640d?narHash=sha256-zPQiSr9oQTifvRgZqRelp4xrkZN85/dgmZ4/bEUYG58%3D' (2025-10-14)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/0b4defa2584313f3b781240b29d61f6f9f7e0df3?narHash=sha256-Oncbh0UmHjSlxO7ErQDM3KM0A5/Znfofj2BSzlHLeVw%3D' (2025-10-09)
→ 'github:nixos/nixpkgs/cf3f5c4def3c7b5f1fc012b3d839575dbe552d43?narHash=sha256-TK9Kr0BYBQ/1P5kAsnNQhmWWKgmZXwUQr4ZMjCzWf2c%3D' (2025-10-12)
• Updated input 'pre-commit-hooks':
'github:cachix/pre-commit-hooks.nix/cfc9f7bb163ad8542029d303e599c0f7eee09835?narHash=sha256-PTod9NG%2Bi3XbbnBKMl/e5uHDBYpwIWivQ3gOWSEuIEM%3D' (2025-10-03)
→ 'github:cachix/pre-commit-hooks.nix/46d55f0aeb1d567a78223e69729734f3dca25a85?narHash=sha256-WftxJgr2MeDDFK47fQKywzC72L2jRc/PWcyGdjaDzkw%3D' (2025-10-13)
• Updated input 'zig':
'github:mitchellh/zig-overlay/40b0e0277f241e768a9b230fd03cb3226dfd4d29?narHash=sha256-NaK7pKt5Ks5X4C5IuMybUo2v6hkzpcv3sR4WwUsJka8%3D' (2025-10-10)
→ 'github:mitchellh/zig-overlay/365085b6652259753b598d43b723858184980bbe?narHash=sha256-/zj5GYO5PKhBWGzbHbqT%2BehY8EghuABdQ2WGfCwZpCQ%3D' (2025-10-14)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2