4e0a2adc40
Flake lock file updates:
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/db030f62a449568345372bd62ed8c5be4824fa49?narHash=sha256-lfxhuxAaHlYFGr8yOrAXZqdMt8PrFLzjVqH9v3lQaoY%3D' (2025-06-13)
→ 'github:NixOS/nixos-hardware/61837d2a33ccc1582c5fabb7bf9130d39fee59ad?narHash=sha256-ynqbgIYrg7P1fAKYqe8I/PMiLABBcNDYG9YaAP/d/C4%3D' (2025-06-16)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/5f4f306bea96741f1588ea4f450b2a2e29f42b98?narHash=sha256-tG5xUn3hFaPpAHYIvr2F88b%2BovcIO5k1HqajFy7ZFPM%3D' (2025-06-13)
→ 'github:NixOS/nixpkgs/6c64dabd3aa85e0c02ef1cdcb6e1213de64baee3?narHash=sha256-h/aac1dGLhS3qpaD2aZt25NdKY7b%2BJT0ZIP2WuGsJMU%3D' (2025-06-15)
• Updated input 'nur':
'github:nix-community/NUR/d9bb25290f2d8be12bea1c61aacf2432317fab8a?narHash=sha256-kXKcSNl0bl4ZbrlfQhrkcRaW/kZEjEed58bjpzLFj5A%3D' (2025-06-16)
→ 'github:nix-community/NUR/be8fafc7b7641c56beee2f6506003d00488ebcf5?narHash=sha256-wh7G45Q/qcBH1yNM157pXKo/NrlraAqKVDwQ69o8v8E%3D' (2025-06-17)
• Updated input 'zig':
'github:mitchellh/zig-overlay/ce80e663e44b435adb5e5420d6b4d285c3cce4e9?narHash=sha256-ooEz7NPaAarC5lfODLufxQL0YKc10RBdgnmUvPlAGZQ%3D' (2025-06-15)
→ 'github:mitchellh/zig-overlay/2ab082721baf0825fc626da0628752c8b8164ba0?narHash=sha256-sGIDb7bjIoU%2BcMA60YimY%2BGGSRIiVu1tXKdVZssx3WY%3D' (2025-06-17)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2