3af762f57b
Flake lock file updates:
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/029bd66faa180e11262dd1bc2732254c33415f52?narHash=sha256-QITcurR19KZlrCngBoCjsFF2BdYsiCG4UqmlrVcLb8Q%3D' (2025-06-04)
→ 'github:NixOS/nixos-hardware/4602f7e1d3f197b3cb540d5accf5669121629628?narHash=sha256-W5GKQHgunda/OP9sbKENBZhMBDNu2QahoIPwnsF6CeM%3D' (2025-06-06)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/c2a03962b8e24e669fb37b7df10e7c79531ff1a4?narHash=sha256-lcZQ8RhsmhsK8u7LIFsJhsLh/pzR9yZ8yqpTzyGdj%2BQ%3D' (2025-06-03)
→ 'github:NixOS/nixpkgs/d3d2d80a2191a73d1e86456a751b83aa13085d7d?narHash=sha256-QuUtALJpVrPnPeozlUG/y%2BoIMSLdptHxb3GK6cpSVhA%3D' (2025-06-05)
• Updated input 'nur':
'github:nix-community/NUR/2c16ffbb0c9f47f8158162377644401291361706?narHash=sha256-aIdzSK%2BJRQCAhA7mcq%2BrmffrvU1n8cIM/Wxm1ANXcw8%3D' (2025-06-06)
→ 'github:nix-community/NUR/aff4128eb3e712d2a592faacc883f3b0ea86c9fd?narHash=sha256-EGEAvVv3wp%2BdWeagxePwVNpMTx%2BdmR//VlZB4vWu2oA%3D' (2025-06-07)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/c2a03962b8e24e669fb37b7df10e7c79531ff1a4?narHash=sha256-lcZQ8RhsmhsK8u7LIFsJhsLh/pzR9yZ8yqpTzyGdj%2BQ%3D' (2025-06-03)
→ 'github:nixos/nixpkgs/d3d2d80a2191a73d1e86456a751b83aa13085d7d?narHash=sha256-QuUtALJpVrPnPeozlUG/y%2BoIMSLdptHxb3GK6cpSVhA%3D' (2025-06-05)
• Updated input 'zig':
'github:mitchellh/zig-overlay/444738d1367615d2bcd3698f433f096061fd8ff4?narHash=sha256-RatZG%2BL7Jse3hESJNBfzaUgmpvDQuNsVyegoV5bhymE%3D' (2025-06-04)
→ 'github:mitchellh/zig-overlay/02226efe3fd9a2060d75b53b06b4b970bbefc5e8?narHash=sha256-i2KjBlZ43Qr8XxmkXnvfnPeuRAklzJZS9IRlAIq8qwA%3D' (2025-06-07)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2