416ce41cf3
Flake lock file updates:
• Updated input 'nix-index-database':
'github:Mic92/nix-index-database/ec7a78cb0e098832d8acac091a4df393259c4839?narHash=sha256-WZf%2BFhebP2/1pK2np5xj/NuDjD6fXK2BHnq/tPUN18o%3D' (2025-09-28)
→ 'github:Mic92/nix-index-database/0ca69684091aa3a6b1fe994c4afeff305b15e915?narHash=sha256-8NI1SqntLfKl6Q0Luemc3aIboezSJElofUrqipF5g78%3D' (2025-10-05)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/e087756cf4abbe1a34f3544c480fc1034d68742f?narHash=sha256-wPd5oGvBBpUEzMF0kWnXge0WITNsITx/aGI9qLHgJ4g%3D' (2025-09-30)
→ 'github:NixOS/nixos-hardware/3441b5242af7577230a78ffb03542add264179ab?narHash=sha256-spZegilADH0q5OngM86u6NmXxduCNv5eX9vCiUPhOYc%3D' (2025-10-04)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/5b5be50345d4113d04ba58c444348849f5585b4a?narHash=sha256-FIBE1qXv9TKvSNwst6FumyHwCRH3BlWDpfsnqRDCll0%3D' (2025-10-01)
→ 'github:NixOS/nixpkgs/3bcc93c5f7a4b30335d31f21e2f1281cba68c318?narHash=sha256-YWo57PL7mGZU7D4WeKFMiW4ex/O6ZolUS6UNBHTZfkI%3D' (2025-10-04)
• Updated input 'nur':
'github:nix-community/NUR/61d31b6dae9b9c16d484bd20648e85e406d68c89?narHash=sha256-cQEfMFDfZKcWivNWeEd2yslf0uPB8cjjXwe0U5fSsiM%3D' (2025-10-04)
→ 'github:nix-community/NUR/33404b168828bde62e36a61f9a16b54b6d6bcdfb?narHash=sha256-oQLW/vQ8/BLhZqp8K8YyP1k8r9ju6iqkbBgBRZ%2Bah74%3D' (2025-10-05)
• Updated input 'zig':
'github:mitchellh/zig-overlay/0e14df55892cf13c56f6c71ea27603b4a069d0b9?narHash=sha256-98EAUwMJ0TmyAJ3j7PsK5droAKhtn6zo9OutYc2RzTA%3D' (2025-10-03)
→ 'github:mitchellh/zig-overlay/0ba7b985dcc285599ab68465cb31778ec74ca907?narHash=sha256-/QKTmOn/tnU85EQSROolTDBZMorfxR3VwjOb94wb3D8%3D' (2025-10-05)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2