b9b9057457
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/7ffe0edc685f14b8c635e3d6591b0bbb97365e6c?narHash=sha256-sOos1jZGKmT6xxPvxGQyPTApOunXvScV4lNjBCXd/CI%3D' (2025-03-30)
→ 'github:NixOS/nixpkgs/02f2af8c8a8c3b2c05028936a1e84daefa1171d4?narHash=sha256-7PCBQ4aGVF8OrzMkzqtYSKyoQuU2jtpPi4lmABpe5X4%3D' (2025-04-01)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/52faf482a3889b7619003c0daec593a1912fddc1?narHash=sha256-6hl6L/tRnwubHcA4pfUUtk542wn2Om%2BD4UnDhlDW9BE%3D' (2025-03-30)
→ 'github:NixOS/nixpkgs/77b584d61ff80b4cef9245829a6f1dfad5afdfa3?narHash=sha256-bmEPmSjJakAp/JojZRrUvNcDX2R5/nuX6bm%2BseVaGhs%3D' (2025-03-31)
• Updated input 'nur':
'github:nix-community/NUR/257a957a47f46614279ab186a760528bd8833613?narHash=sha256-64TpCxhxG3ymB0ucAxxffmJtArrCvjtrbdzqGgHcBuE%3D' (2025-04-01)
→ 'github:nix-community/NUR/82e3947c924a0215eb3b377b85c945cf91da521f?narHash=sha256-nQ1hW49uAso6mPUv/5XnW8%2B/BlLGCUr9fTHvdE5sJ4k%3D' (2025-04-02)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/52faf482a3889b7619003c0daec593a1912fddc1?narHash=sha256-6hl6L/tRnwubHcA4pfUUtk542wn2Om%2BD4UnDhlDW9BE%3D' (2025-03-30)
→ 'github:nixos/nixpkgs/77b584d61ff80b4cef9245829a6f1dfad5afdfa3?narHash=sha256-bmEPmSjJakAp/JojZRrUvNcDX2R5/nuX6bm%2BseVaGhs%3D' (2025-03-31)
• Updated input 'zig':
'github:mitchellh/zig-overlay/ac26537dd011db2e8790d6b805b0c8a148b0b48d?narHash=sha256-ZlTYtON6d7emqp5TUUKwDMvGTWp5/TLUqzT3nG3zmis%3D' (2025-03-31)
→ 'github:mitchellh/zig-overlay/a81c2ca57a9e4b3ed8dbb66f26f4283ef00620a5?narHash=sha256-vCEJAJKoZe2h6GPy/hIpX%2BZ2Olsh7i0qgY4E3Re9iHM%3D' (2025-04-02)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2