66e4160279
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/82fb7dedaad83e5e279127a38ef410bcfac6d77c?narHash=sha256-MOU5YdVu4DVwuT5ztXgQpPuRRBjSjUGIdUzOQr9iQOY%3D' (2026-01-08)
→ 'github:nix-community/home-manager/2a63d0e9d2c72ac4d4150ebb242cf8d86f488c8c?narHash=sha256-vRV1dWJOCpCal3PRr86wE2WTOMfAhTu6G7bSvOsryUo%3D' (2026-01-16)
• Updated input 'kolide-launcher':
'github:kolide/nix-agent/436f2a23643f46e26b2297c29489ea9a3c15497f?narHash=sha256-hIN5xhmyiMiSJSfTLzPhHcwaJooxj306wBz50fn0wsM%3D' (2025-12-19)
→ 'github:kolide/nix-agent/1908c72cdd61147ade7dceb86faec18e0d8db604?narHash=sha256-oda6SpSoGr0dzNuoUo5LYsAgX3/b9WcjxQoBuyJjlNQ%3D' (2026-01-16)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/7297dfc69ae9b06e984a6f69900ce25e67c76f46?narHash=sha256-jJr/zDxu5evfQxlXtMrFFF68/RNj1UrctS/eIsay4k0%3D' (2026-01-15)
→ 'github:NixOS/nixos-hardware/cce68f4a54fa4e3d633358364477f5cc1d782440?narHash=sha256-IRPmIOV2tPwxbhP/I9M5AmwhTC0lMPtoPStC%2B8T6xl0%3D' (2026-01-16)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/1412caf7bf9e660f2f962917c14b1ea1c3bc695e?narHash=sha256-AIdl6WAn9aymeaH/NvBj0H9qM%2BXuAuYbGMZaP0zcXAQ%3D' (2026-01-13)
→ 'github:NixOS/nixpkgs/e4bae1bd10c9c57b2cf517953ab70060a828ee6f?narHash=sha256-Kell/SpJYVkHWMvnhqJz/8DqQg2b6PguxVWOuadbHCc%3D' (2026-01-16)
• Updated input 'nur':
'github:nix-community/NUR/d2c8a62d0fdc2eb549a10662512173e8a90496d0?narHash=sha256-piE8Bro4Ah0jMZHqNxv%2Bbe4U75DjOco7LxUFCrTYRlE%3D' (2026-01-16)
→ 'github:nix-community/NUR/aeb433e023dea35ff4a9644c5e153ebe73347688?narHash=sha256-b7D0il/gO2YAWi2C7p3b8pVtAEPYYQg5fmtB5OOY3FU%3D' (2026-01-17)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/1412caf7bf9e660f2f962917c14b1ea1c3bc695e?narHash=sha256-AIdl6WAn9aymeaH/NvBj0H9qM%2BXuAuYbGMZaP0zcXAQ%3D' (2026-01-13)
→ 'github:nixos/nixpkgs/e4bae1bd10c9c57b2cf517953ab70060a828ee6f?narHash=sha256-Kell/SpJYVkHWMvnhqJz/8DqQg2b6PguxVWOuadbHCc%3D' (2026-01-16)
• Updated input 'zig':
'github:mitchellh/zig-overlay/10f6a15c51c59c347e893add551720377f346e7e?narHash=sha256-1xIRgwN7g8Mg1KHYb8g8uBH9s39Vkq913eJwBMUwuhA%3D' (2026-01-16)
→ 'github:mitchellh/zig-overlay/27fb45c107ca8c2eda2b6f255bdd33bb82f3026c?narHash=sha256-PUDjT7pkY4WaKjS7flnjfwd8Q2piVsrNH/t/D%2BiYQ0g%3D' (2026-01-16)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
$ nix why-depends .#nixosConfigurations.vno1-gdrx.config.system.build.toplevel .#legacyPackages.x86_64-linux.mbedtls_2
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2