993f7f7d8a
Flake lock file updates:
• Updated input 'flake-compat':
'github:nix-community/flake-compat/38fd3954cf65ce6faf3d0d45cd26059e059f07ea?narHash=sha256-FrlieJH50AuvagamEvWMIE6D2OAnERuDboFDYAED/dE%3D' (2024-06-02)
→ 'github:nix-community/flake-compat/0f158086a2ecdbb138cd0429410e44994f1b7e4b?narHash=sha256-5SSSZ/oQkwfcAz/o/6TlejlVGqeK08wyREBQ5qFFPhM%3D' (2025-05-02)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/b000159bba69b0106a42f65e52dbf27f77aca9d3?narHash=sha256-hEAvEN%2By/OQ7wA7%2Bu3bFJwXSe8yoSf2QaOMH3hyTJTQ%3D' (2025-04-29)
→ 'github:NixOS/nixpkgs/3e362ce63e16b9572d8c2297c04f7c19ab6725a5?narHash=sha256-3dqArYSMP9hM7Qpy5YWhnSjiqniSaT2uc5h2Po7tmg0%3D' (2025-04-30)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/46e634be05ce9dc6d4db8e664515ba10b78151ae?narHash=sha256-y3h3NLnzRSiUkYpnfvnS669zWZLoqqI6NprtLQ%2B5dck%3D' (2025-04-29)
→ 'github:NixOS/nixpkgs/91bf6dffa21c7709607c9fdbf9a6acb44e7a0a5d?narHash=sha256-r7IZkN9NhK/IO9/J6D9ih2P1OXb67nr5HaQ1YAte18w%3D' (2025-05-01)
• Updated input 'nur':
'github:nix-community/NUR/88952868f3b10fc704e5ce4936fba9d2104ca1d4?narHash=sha256-yOs7FBbds9EGvriM%2BJc7il7w31LZwuIPYZCi%2BfkvXEY%3D' (2025-05-01)
→ 'github:nix-community/NUR/74975d369f13dba230379d242acc1b78c798828e?narHash=sha256-5ay1ZL5TNyYEiM12j2lHrJPoaaHFEpGDF4H2BDtuuN4%3D' (2025-05-02)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/46e634be05ce9dc6d4db8e664515ba10b78151ae?narHash=sha256-y3h3NLnzRSiUkYpnfvnS669zWZLoqqI6NprtLQ%2B5dck%3D' (2025-04-29)
→ 'github:nixos/nixpkgs/91bf6dffa21c7709607c9fdbf9a6acb44e7a0a5d?narHash=sha256-r7IZkN9NhK/IO9/J6D9ih2P1OXb67nr5HaQ1YAte18w%3D' (2025-05-01)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2