4c4e32986f
Flake lock file updates:
• Updated input 'kolide-launcher':
'github:kolide/nix-agent/54d3de0f0bb41b99fb442c4dae22807c2f00ac1a?narHash=sha256-OTXuUcHnbexJ5w9lrToRV83T0LDxXVmlTYzgCTNPkK8%3D' (2025-10-27)
→ 'github:kolide/nix-agent/a20e7eb5a63053f8cd8e9315c206a1c5be1707b5?narHash=sha256-qtoeYL1DaNzmOIOLaThsmxJmoSHvVixH/Clw8h9mhlM%3D' (2025-10-30)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/2379bc40992ec29feb1933bb4acd224fa055f3f8?narHash=sha256-zuiwvKAPwtMmwf44tb7Q7Y5d7JkBeuaF89PISUnkWA8%3D' (2025-10-29)
→ 'github:NixOS/nixos-hardware/43ffe9ac82567512abb83187cb673de1091bdfa8?narHash=sha256-XdPVSYyIBK4/ruoqujaQmmSGg3J2/EenexV9IEXhr6o%3D' (2025-10-30)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/78e34d1667d32d8a0ffc3eba4591ff256e80576e?narHash=sha256-vY2OLVg5ZTobdroQKQQSipSIkHlxOTrIF1fsMzPh8w8%3D' (2025-10-26)
→ 'github:NixOS/nixpkgs/daf6dc47aa4b44791372d6139ab7b25269184d55?narHash=sha256-wxX7u6D2rpkJLWkZ2E932SIvDJW8%2BON/0Yy8%2Ba5vsDU%3D' (2025-10-27)
• Updated input 'nur':
'github:nix-community/NUR/4f741bbe5930613393a882ae2c7cf8ce989515e7?narHash=sha256-DGw%2BAixtf3M7pw9WkdaJtwAJSmdmDz4l9LxTU8/mdjY%3D' (2025-10-30)
→ 'github:nix-community/NUR/b76d44e0932aeafcea3484d7db1162d3c2ed2495?narHash=sha256-dbngfygtvWcVOPUJPl7XqP%2BMQHIySxQhnOkzikcn/k4%3D' (2025-10-31)
• Updated input 'zig':
'github:mitchellh/zig-overlay/a5150d558dc58769d4309437e1ff3d9d473fb548?narHash=sha256-80VmB/MA/Lx3T6LyLjzVMIgih9aZZm6DU8htC4k5nxU%3D' (2025-10-29)
→ 'github:mitchellh/zig-overlay/ae1fddbb9bce72065b67331efff583651bd1b123?narHash=sha256-tZH%2BgSx3jbgtMp58EYYdQ8vAPmNav2Fwu0ekMfGLl50%3D' (2025-10-31)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
$ nix why-depends .#nixosConfigurations.vno1-gdrx.config.system.build.toplevel .#legacyPackages.x86_64-linux.mbedtls_2
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2