4ae861497e
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/0d13ea58d565d3c1c1468ddae1f623316dc395d9?narHash=sha256-e9zc/rHdoH9i%2BsFFhhQiKoF6IuD%2BT2rB/nUyPaO7CCg%3D' (2025-05-29)
→ 'github:nix-community/home-manager/282e1e029cb6ab4811114fc85110613d72771dea?narHash=sha256-RMhjnPKWtCoIIHiuR9QKD7xfsKb3agxzMfJY8V9MOew%3D' (2025-05-31)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/11f2d9ea49c3e964315215d6baa73a8d42672f06?narHash=sha256-dn64Pg9xLETjblwZs9Euu/SsjW80pd6lr5qSiyLY1pg%3D' (2025-05-22)
→ 'github:NixOS/nixos-hardware/daa628a725ab4948e0e2b795e8fb6f4c3e289a7a?narHash=sha256-pZH4bqbOd8S%2Bsi6UcfjHovWDiWKiIGRNRMpmRWaDIms%3D' (2025-05-30)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/7848cd8c982f7740edf76ddb3b43d234cb80fc4d?narHash=sha256-ixMT0a8mM091vSswlTORZj93WQAJsRNmEvqLL%2BqwTFM%3D' (2025-05-26)
→ 'github:NixOS/nixpkgs/7282cb574e0607e65224d33be8241eae7cfe0979?narHash=sha256-hYKMs3ilp09anGO7xzfGs3JqEgUqFMnZ8GMAqI6/k04%3D' (2025-05-28)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/4faa5f5321320e49a78ae7848582f684d64783e9?narHash=sha256-QlL8slIgc16W5UaI3w7xHQEP%2BQmv/6vSNTpoZrrSlbk%3D' (2025-05-27)
→ 'github:NixOS/nixpkgs/96ec055edbe5ee227f28cdbc3f1ddf1df5965102?narHash=sha256-7doLyJBzCllvqX4gszYtmZUToxKvMUrg45EUWaUYmBg%3D' (2025-05-28)
• Updated input 'nur':
'github:nix-community/NUR/4cce78af34a5c8742df1064a9c7be7d27c66d736?narHash=sha256-88ubtcmdMt1AGCVprlZ1taIixUjWDsuM6Mvkhd%2B%2B0h0%3D' (2025-05-30)
→ 'github:nix-community/NUR/fa6d453c9203aa1623577ac81cb1e7b10604904d?narHash=sha256-jgCbIiuKJ3M7LkFaK7AlpTkATLLqa2eqeqHTMsMgYoM%3D' (2025-05-31)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/4faa5f5321320e49a78ae7848582f684d64783e9?narHash=sha256-QlL8slIgc16W5UaI3w7xHQEP%2BQmv/6vSNTpoZrrSlbk%3D' (2025-05-27)
→ 'github:nixos/nixpkgs/96ec055edbe5ee227f28cdbc3f1ddf1df5965102?narHash=sha256-7doLyJBzCllvqX4gszYtmZUToxKvMUrg45EUWaUYmBg%3D' (2025-05-28)
• Updated input 'zig':
'github:mitchellh/zig-overlay/cc690473ea0ed4ce6e1d4dbfdb78e860500f4ed0?narHash=sha256-yI1WgW3w2bE6qvaqBjorINFMnS6jfc1UNVNsL1XeGm8%3D' (2025-05-30)
→ 'github:mitchellh/zig-overlay/505965056268ebca439b1c90828c7b0091cf57a9?narHash=sha256-%2BhP/H2/mzoej1bDF5VfG7wXgPRNffmaWuRvyot4H9ko%3D' (2025-05-31)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2