91700a504c
Flake lock file updates:
• Updated input 'nix-index-database':
'github:Mic92/nix-index-database/ec179dd13fb7b4c6844f55be91436f7857226dce?narHash=sha256-cxCQ413JTUuRv9Ygd8DABJ1D6kuB/nTfQqC0Lu9C0ls%3D' (2025-05-18)
→ 'github:Mic92/nix-index-database/a98adbf54d663395df0b9929f6481d4d80fc8927?narHash=sha256-t9fx0l61WOxtWxXCqlXPWSuG/0XMF9DtE2T7KXgMqJw%3D' (2025-05-25)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/55d1f923c480dadce40f5231feb472e81b0bab48?narHash=sha256-y2ZtlIlNTuVJUZCqzZAhIw5rrKP4DOSklev6c8PyCkQ%3D' (2025-05-22)
→ 'github:NixOS/nixpkgs/7c43f080a7f28b2774f3b3f43234ca11661bf334?narHash=sha256-rqc2RKYTxP3tbjA%2BPB3VMRQNnjesrT0pEofXQTrMsS8%3D' (2025-05-25)
• Updated input 'nur':
'github:nix-community/NUR/65f929e6e23929e6da5fa6b95ac3c5c4e43d6216?narHash=sha256-3nny7VjOFPC3geBCQj59qQdKoYE8%2Bbf%2Btc48YPEL8QU%3D' (2025-05-24)
→ 'github:nix-community/NUR/1fddc69b73b54110650213d13f363227da765237?narHash=sha256-t734cEJ3zKUEUdlIWVPiy9WxU66WhXqg9XQwoDhLMeA%3D' (2025-05-25)
• Updated input 'zig':
'github:mitchellh/zig-overlay/4e1a1eec74f0c42103f557a5049151b5834fda7f?narHash=sha256-3Kd1OhEdlPWb2b0EVdkMe8b7nZmqS/fzXdyorh%2BOFuA%3D' (2025-05-24)
→ 'github:mitchellh/zig-overlay/d665bd0897e491db11e24a12213c7f2a3ded5c08?narHash=sha256-IcT4UOp%2BK7lDjYuSzKGMzrv1dp1znK3YS7UPKkLDvQ0%3D' (2025-05-25)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2