49ebb7b6b6
Flake lock file updates:
• Updated input 'agenix':
'github:ryantm/agenix/2f0f812f69f3eb4140157fe15e12739adf82e32a?narHash=sha256-wyT7Pl6tMFbFrs8Lk/TlEs81N6L%2BVSybPfiIgzU8lbQ%3D' (2025-10-19)
→ 'github:ryantm/agenix/9ba0d85de3eaa7afeab493fed622008b6e4924f5?narHash=sha256-lsNWuj4Z%2BpE7s0bd2OKicOFq9bK86JE0ZGeKJbNqb94%3D' (2025-10-28)
• Updated input 'flake-compat':
'github:nix-community/flake-compat/0f158086a2ecdbb138cd0429410e44994f1b7e4b?narHash=sha256-5SSSZ/oQkwfcAz/o/6TlejlVGqeK08wyREBQ5qFFPhM%3D' (2025-05-02)
→ 'github:nix-community/flake-compat/4a56054d8ffc173222d09dad23adf4ba946c8884?narHash=sha256-AtrEP6Jmdvrqiv4x2xa5mrtaIp3OEe8uBYCDZDS%2Bhu8%3D' (2025-10-28)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/d6645c340ef7d821602fd2cd199e8d1eed10afbc?narHash=sha256-2m1S4jl%2BGEDtlt2QqeHil8Ny456dcGSKJAM7q3j/BFU%3D' (2025-10-20)
→ 'github:NixOS/nixos-hardware/9c0ee5dfa186e10efe9b53505b65d22c81860fde?narHash=sha256-INBZnPA9JzyDn%2BFnni2250PbRzKx7Eafz0T2c7NhXiQ%3D' (2025-10-28)
• Updated input 'nur':
'github:nix-community/NUR/b1f52981224a0197d0a6303ca2d65352955ef18f?narHash=sha256-vL4ueyRFNexiXZE7PFfLo9l4Z4ch7KIdLkdCbD2uXqM%3D' (2025-10-28)
→ 'github:nix-community/NUR/914345a6f31195c8718b9edc00ef88291223a1a2?narHash=sha256-mhZzA8Z7TzYiuTGPqA3EYqX2WpB7SVrLtsRUd5P2OwA%3D' (2025-10-29)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
$ nix why-depends .#nixosConfigurations.vno1-gdrx.config.system.build.toplevel .#legacyPackages.x86_64-linux.mbedtls_2
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2