65fff6d374
Flake lock file updates:
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/f7bee55a5e551bd8e7b5b82c9bc559bc50d868d1?narHash=sha256-bUGjvaPVsOfQeTz9/rLTNLDyqbzhl0CQtJJlhFPhIYw%3D' (2025-04-24)
→ 'github:NixOS/nixos-hardware/f16e0cd51c8bb6df7bfc5b7bbec3b36ed59020ae?narHash=sha256-kYHos4iRQv9FxIbj8jkB97m1nv/ucf7xvuQ4MtJjt5Q%3D' (2025-04-29)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/f771eb401a46846c1aebd20552521b233dd7e18b?narHash=sha256-ITSpPDwvLBZBnPRS2bUcHY3gZSwis/uTe255QgMtTLA%3D' (2025-04-24)
→ 'github:NixOS/nixpkgs/5461b7fa65f3ca74cef60be837fd559a8918eaa0?narHash=sha256-T36rUZHUART00h3dW4sV5tv4MrXKT7aWjNfHiZz7OHg%3D' (2025-04-27)
• Updated input 'nur':
'github:nix-community/NUR/75c5dde9f597c4847e76b7c79c8620285f3f6f85?narHash=sha256-LuhvYPLYGDSiH%2B7NU4qmW4UsnN/EoVnYUon/3k7OyMQ%3D' (2025-04-28)
→ 'github:nix-community/NUR/959f1f512589b284132bda8b5b5b9e280376a328?narHash=sha256-1j6ZnSd5lLsvt1hBiGNoFTdKljVWPnRL6OcPC3K94ss%3D' (2025-04-29)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/f771eb401a46846c1aebd20552521b233dd7e18b?narHash=sha256-ITSpPDwvLBZBnPRS2bUcHY3gZSwis/uTe255QgMtTLA%3D' (2025-04-24)
→ 'github:nixos/nixpkgs/5461b7fa65f3ca74cef60be837fd559a8918eaa0?narHash=sha256-T36rUZHUART00h3dW4sV5tv4MrXKT7aWjNfHiZz7OHg%3D' (2025-04-27)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2