a8a0344346
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/50eee705bbdbac942074a8c120e8194185633675?narHash=sha256-EyXUNSa%2BH%2BYvGVuQJP1nZskXAowxKYp79RNUsNdQTj4%3D' (2025-05-02)
→ 'github:nix-community/home-manager/b4bbdc6fde16fc2051fcde232f6e288cd22007ca?narHash=sha256-D/6rkiC6w2p%2B4SwRiVKrWIeYzun8FBg7NlMKMwQMxO0%3D' (2025-05-12)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/dda3dcd3fe03e991015e9a74b22d35950f264a54?narHash=sha256-Ua0drDHawlzNqJnclTJGf87dBmaO/tn7iZ%2BTCkTRpRc%3D' (2025-05-08)
→ 'github:NixOS/nixpkgs/d89fc19e405cb2d55ce7cc114356846a0ee5e956?narHash=sha256-3e%2BAVBczosP5dCLQmMoMEogM57gmZ2qrVSrmq9aResQ%3D' (2025-05-10)
• Updated input 'nur':
'github:nix-community/NUR/6cde43e97c9fe43a5d3ee668d592bcbb35f12cb5?narHash=sha256-W0TaV79hAWpT%2BrPVond5v0AXuqf6KVuSySRu3w6cLzg%3D' (2025-05-11)
→ 'github:nix-community/NUR/ef71518373471a395110a953e403b83648fb7601?narHash=sha256-Pk4KEEqOBq9LlTDB4Bvadtf4C5L2etAjm7NMcnTrFoQ%3D' (2025-05-12)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/dda3dcd3fe03e991015e9a74b22d35950f264a54?narHash=sha256-Ua0drDHawlzNqJnclTJGf87dBmaO/tn7iZ%2BTCkTRpRc%3D' (2025-05-08)
→ 'github:nixos/nixpkgs/d89fc19e405cb2d55ce7cc114356846a0ee5e956?narHash=sha256-3e%2BAVBczosP5dCLQmMoMEogM57gmZ2qrVSrmq9aResQ%3D' (2025-05-10)
• Updated input 'zig':
'github:mitchellh/zig-overlay/335adace47a537e68d981e4c313c0706eaa9cec7?narHash=sha256-UBF1/XOS%2BmNzgxqYApwgpFWQLBUXSaPrXkR9Vr9hxok%3D' (2025-05-11)
→ 'github:mitchellh/zig-overlay/99d83aa11f1e27b69dc4b37b0edd4f4e67d8724b?narHash=sha256-6QYCTx41gNr9lG2rm3i//SsUIdbAZ/SAf%2BtbfkfgE2Q%3D' (2025-05-12)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2