acf70f4a26
Flake lock file updates:
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/220761ec01c4e0c5ad3562fe50d45ee5c89e3d5a?narHash=sha256-domY8jhuiTYRfmhYvgqNR5SnQyTfX17s5NzuCtj1FtY%3D' (2025-05-20)
→ 'github:NixOS/nixos-hardware/6ac6ec6fcb410e15a60ef5ec94b8a2b35b5dd282?narHash=sha256-lSXzv33yv1O9r9Ai1MtYFDX3OKhWsZMn/5FFb4Rni/k%3D' (2025-05-20)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/9b5ac7ad45298d58640540d0323ca217f32a6762?narHash=sha256-YbsZyuRE1tobO9sv0PUwg81QryYo3L1F3R3rF9bcG38%3D' (2025-05-17)
→ 'github:NixOS/nixpkgs/72841a4a8761d1aed92ef6169a636872c986c76d?narHash=sha256-LXkWBVqilgx7Pohwqu/ABxDVw%2BCmi5/Mj2S2mpUH0Fw%3D' (2025-05-19)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/292fa7d4f6519c074f0a50394dbbe69859bb6043?narHash=sha256-GaOZntlJ6gPPbbkTLjbd8BMWaDYafhuuYRNrxCGnPJw%3D' (2025-05-18)
→ 'github:NixOS/nixpkgs/2795c506fe8fb7b03c36ccb51f75b6df0ab2553f?narHash=sha256-W7lqHp0qZiENCDwUZ5EX/lNhxjMdNapFnbErcbnP11Q%3D' (2025-05-20)
• Updated input 'nur':
'github:nix-community/NUR/7c239259399ed5f628fc1ebde14d63e346f0ea72?narHash=sha256-bJI/Plr7k6MhlRBBDl6eeV2QxK0%2BjmuHlREz4Wrbc08%3D' (2025-05-20)
→ 'github:nix-community/NUR/2fa1189f2dc0978099124bcca90e12b687bbed7f?narHash=sha256-EntEszS/p/k2qvsgam%2BGn09%2BbdaFHYkx1iOiZUEJba8%3D' (2025-05-21)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/292fa7d4f6519c074f0a50394dbbe69859bb6043?narHash=sha256-GaOZntlJ6gPPbbkTLjbd8BMWaDYafhuuYRNrxCGnPJw%3D' (2025-05-18)
→ 'github:nixos/nixpkgs/2795c506fe8fb7b03c36ccb51f75b6df0ab2553f?narHash=sha256-W7lqHp0qZiENCDwUZ5EX/lNhxjMdNapFnbErcbnP11Q%3D' (2025-05-20)
• Updated input 'zig':
'github:mitchellh/zig-overlay/144ac192cb6ff30331fb1de0fd67c8fafaa1e8e1?narHash=sha256-QRK9fn%2Bk4iNucwrj7dCMWzNuMzd05gu4Ywmbdgszgfc%3D' (2025-05-20)
→ 'github:mitchellh/zig-overlay/29359f5971918b4048556c7ec01d45c7a8efa21c?narHash=sha256-mx3f1%2BiNIfcPbe8fnejNhS4oEdYT3TNKesPlURFihX4%3D' (2025-05-21)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2