8d390346dd
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/f6af7280a3390e65c2ad8fd059cdc303426cbd59?narHash=sha256-zFL6zsf/5OztR1NSNQF33dvS1fL/BzVUjabZq4qrtY4%3D' (2025-03-17)
→ 'github:nix-community/home-manager/0948aeedc296f964140d9429223c7e4a0702a1ff?narHash=sha256-jbqlw4sPArFtNtA1s3kLg7/A4fzP4GLk9bGbtUJg0JQ%3D' (2025-03-22)
• Updated input 'nix-index-database':
'github:Mic92/nix-index-database/2cfb4e1ca32f59dd2811d7a6dd5d4d1225f0955c?narHash=sha256-pDNzMoR6m1ZSJToZQ6XDTLVSdzIzmFl1b8Pc3f7iV6Y%3D' (2025-03-17)
→ 'github:Mic92/nix-index-database/36dc43cb50d5d20f90a28d53abb33a32b0a2aae6?narHash=sha256-AulwPVrS9859t%2BeJ61v24wH/nfBEIDSXYxlRo3fL/SA%3D' (2025-03-23)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/daaae13dff0ecc692509a1332ff9003d9952d7a9?narHash=sha256-VFMgJkp/COvkt5dnkZB4D2szVdmF6DGm5ZdVvTUy61c%3D' (2025-03-19)
→ 'github:NixOS/nixos-hardware/380ed15bcd6440606c6856db44a99140d422b46f?narHash=sha256-yJ3OOAmsGAxSl0bTmKUp3%2BcEYtSS%2BV6hUPK2rYhIPr8%3D' (2025-03-22)
• Updated input 'nur':
'github:nix-community/NUR/c72c4acc9a04d2d242c9dadfee75d358d75a9e38?narHash=sha256-%2BzILWE0iMAb/U7P/WK%2B3%2Bami9F13zLAYT5bwt69veww%3D' (2025-03-22)
→ 'github:nix-community/NUR/c52011abd7fda6d05aa84e9e0110d56f06cac071?narHash=sha256-7aTLjfdlPhDlixUAziHRBI4R7p4QZq/bhWffnPaW9AE%3D' (2025-03-23)
• Updated input 'pre-commit-hooks':
'github:cachix/pre-commit-hooks.nix/ea26a82dda75bee6783baca6894040c8e6599728?narHash=sha256-QmF0proyjXI9YyZO9GZmc7/uEu5KVwCtcdLsKSoxPAI%3D' (2025-03-18)
→ 'github:cachix/pre-commit-hooks.nix/dcf5072734cb576d2b0c59b2ac44f5050b5eac82?narHash=sha256-DwOTp7nvfi8mRfuL1escHDXabVXFGT1VlPD1JHrtrco%3D' (2025-03-22)
• Updated input 'zig':
'github:mitchellh/zig-overlay/bd5dc568a93b43b78aadb11a3a585c6e30333199?narHash=sha256-hIODf8UGo/fbK5LDx%2BEse4Jt9n5FZjwZvYCM70HtO8A%3D' (2025-03-21)
→ 'github:mitchellh/zig-overlay/57c9aa1f3f2f861ebce3102fcbb9db6d5b1460a0?narHash=sha256-LVZI6NL%2Beu8aFotXHrg12lMvwGk/Uxu9SOmq3LzkQFI%3D' (2025-03-23)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2