8d16c77eee
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/b4bbdc6fde16fc2051fcde232f6e288cd22007ca?narHash=sha256-D/6rkiC6w2p%2B4SwRiVKrWIeYzun8FBg7NlMKMwQMxO0%3D' (2025-05-12)
→ 'github:nix-community/home-manager/1eec32f0efe3b830927989767a9e6ece0d82d608?narHash=sha256-3MmiUN/jOHBHQUnjqzg6qKArc17j2OS6jisEppDY4g8%3D' (2025-05-15)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/a39ed32a651fdee6842ec930761e31d1f242cb94?narHash=sha256-k9ut1LSfHCr0AW82ttEQzXVCqmyWVA5%2BSHJkS5ID/Jo%3D' (2025-05-11)
→ 'github:NixOS/nixpkgs/5d736263df906c5da72ab0f372427814de2f52f8?narHash=sha256-fLise%2Bys%2BbpyjuUUkbwqo5W/UyIELvRz9lPBPoB0fbM%3D' (2025-05-14)
• Updated input 'nur':
'github:nix-community/NUR/a1cf53dabc89d4fc134324da3430215bf3045460?narHash=sha256-m/W2iBjfcl%2B9VjqoCgRYNUm1Vs/zs8dkj9qp/vU1ttY%3D' (2025-05-15)
→ 'github:nix-community/NUR/fd43d4582483cd84351a7e32a3add13b7b0d0898?narHash=sha256-ZJzE1QGsOb52wlBLITXMMATX9%2BhKcxxBXbjusA3fkgU%3D' (2025-05-16)
• Updated input 'pre-commit-hooks':
'github:cachix/pre-commit-hooks.nix/fa466640195d38ec97cf0493d6d6882bc4d14969?narHash=sha256-Wb2xeSyOsCoTCTj7LOoD6cdKLEROyFAArnYoS%2BnoCWo%3D' (2025-05-06)
→ 'github:cachix/pre-commit-hooks.nix/80479b6ec16fefd9c1db3ea13aeb038c60530f46?narHash=sha256-2Y53NGIX2vxfie1rOW0Qb86vjRZ7ngizoo%2BbnXU9D9k%3D' (2025-05-16)
• Updated input 'zig':
'github:mitchellh/zig-overlay/db7e62b9b343f95b5081408ef31b9ab9e88adac9?narHash=sha256-/GFXMA7hQHxJ%2Be3uIbwyLbgBNIEdRmAHIx93vh%2B9i70%3D' (2025-05-15)
→ 'github:mitchellh/zig-overlay/a61dae82ac04d21a3ff26d29e3dc86d1c3564b67?narHash=sha256-93UmnwzJn/pRK6aawww3w6vcahHZQEFVPkBly88ZQPo%3D' (2025-05-15)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2