7adcfb8429
Flake lock file updates:
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/d89fc19e405cb2d55ce7cc114356846a0ee5e956?narHash=sha256-3e%2BAVBczosP5dCLQmMoMEogM57gmZ2qrVSrmq9aResQ%3D' (2025-05-10)
→ 'github:NixOS/nixpkgs/adaa24fbf46737f3f1b5497bf64bae750f82942e?narHash=sha256-qhFMmDkeJX9KJwr5H32f1r7Prs7XbQWtO0h3V0a0rFY%3D' (2025-05-13)
• Updated input 'nur':
'github:nix-community/NUR/2378adbb9ebb4654dc0d41786609839b6ad4a7ef?narHash=sha256-41VHCKCevxL7Luqwc9A2r3DPTOz6Ky%2BnRkHp1eurtmA%3D' (2025-05-14)
→ 'github:nix-community/NUR/a1cf53dabc89d4fc134324da3430215bf3045460?narHash=sha256-m/W2iBjfcl%2B9VjqoCgRYNUm1Vs/zs8dkj9qp/vU1ttY%3D' (2025-05-15)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/d89fc19e405cb2d55ce7cc114356846a0ee5e956?narHash=sha256-3e%2BAVBczosP5dCLQmMoMEogM57gmZ2qrVSrmq9aResQ%3D' (2025-05-10)
→ 'github:nixos/nixpkgs/adaa24fbf46737f3f1b5497bf64bae750f82942e?narHash=sha256-qhFMmDkeJX9KJwr5H32f1r7Prs7XbQWtO0h3V0a0rFY%3D' (2025-05-13)
• Updated input 'zig':
'github:mitchellh/zig-overlay/1ad08906603c09cf86c57bf1691bbe31f8b7d007?narHash=sha256-OK5YYAbcpx6DNFF1UBM5eZuhXHi1W1U15Bm1VqKPOME%3D' (2025-05-14)
→ 'github:mitchellh/zig-overlay/db7e62b9b343f95b5081408ef31b9ab9e88adac9?narHash=sha256-/GFXMA7hQHxJ%2Be3uIbwyLbgBNIEdRmAHIx93vh%2B9i70%3D' (2025-05-15)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2