632a2e4247
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/7a06e8a2f844e128d3b210a000a62716b6040b7f?narHash=sha256-ONYqnKrPzfKEEPChoJ9qPcfvBqW9ZgieDKD7UezWPg4%3D' (2026-01-04)
→ 'github:nix-community/home-manager/6bd04da47cfb48dfd15eabf08364b78ad894f5b2?narHash=sha256-KpoCBPvwHz3gAQtIUkohE2InRBFK3r0/FM6z5SPWfvM%3D' (2026-01-05)
• Updated input 'nur':
'github:nix-community/NUR/2a1df9ce99610dd5ee1a1e09f1222fb7586bbdd2?narHash=sha256-LuSe5aZbth1uE9C5NFL9zhqIkBoleL3g15TFRVn9JiU%3D' (2026-01-05)
→ 'github:nix-community/NUR/d48d33629c67dd2cbee2fe83b1e01bdce3ebdd50?narHash=sha256-DxJyanyDPOJ5PuJKUPA1vXqGj5XVqaM1tFbZqVDiwxg%3D' (2026-01-06)
• Updated input 'zig':
'github:mitchellh/zig-overlay/501956cc4a633fdc744dc4cdd88ce12c65b7fc65?narHash=sha256-rNGKx9KO30dKt1wfpf6F0DrUaqp4jRZoqUi6%2BFy32yM%3D' (2026-01-05)
→ 'github:mitchellh/zig-overlay/1508a4f84129c2824ee4fcbdec31c63bdcf08756?narHash=sha256-Jc/KmlLyn2T8P/ZpgBoMkULsfmn8B4PjnwiXzlEA9Zg%3D' (2026-01-06)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
$ nix why-depends .#nixosConfigurations.vno1-gdrx.config.system.build.toplevel .#legacyPackages.x86_64-linux.mbedtls_2
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2