be70a84078
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/25e53aa156d47bad5082ff7618f5feb1f5e02d01?narHash=sha256-F8WmEwFoHsnix7rt290R0rFXNJiMbClMZyIC/e%2BHYf0%3D' (2025-09-25)
→ 'github:NixOS/nixpkgs/5ed4e25ab58fd4c028b59d5611e14ea64de51d23?narHash=sha256-TvODmeR2W7yX/JmOCmP%2BlAFNkTT7hAxYcF3Kz8SZV3w%3D' (2025-09-29)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/e643668fd71b949c53f8626614b21ff71a07379d?narHash=sha256-NY3kSorgqE5LMm1LqNwGne3ZLMF2/ILgLpFr1fS4X3o%3D' (2025-09-24)
→ 'github:NixOS/nixpkgs/e9f00bd893984bc8ce46c895c3bf7cac95331127?narHash=sha256-0m27AKv6ka%2Bq270dw48KflE0LwQYrO7Fm4/2//KCVWg%3D' (2025-09-28)
• Updated input 'nur':
'github:nix-community/NUR/4edcc30d423cad749c216428403842ba34cefb8a?narHash=sha256-//Y/6%2BfvsqcszAIR75u8JwOOx2Ic81tp1IUcg4N8RZw%3D' (2025-09-29)
→ 'github:nix-community/NUR/277bf80893db769e7c5b665fd62ebd23424543b5?narHash=sha256-gsQDpRxDf6EyON14ng4uRvwCsO%2BV0a/aUy7J/tDiZ2g%3D' (2025-09-30)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/e643668fd71b949c53f8626614b21ff71a07379d?narHash=sha256-NY3kSorgqE5LMm1LqNwGne3ZLMF2/ILgLpFr1fS4X3o%3D' (2025-09-24)
→ 'github:nixos/nixpkgs/e9f00bd893984bc8ce46c895c3bf7cac95331127?narHash=sha256-0m27AKv6ka%2Bq270dw48KflE0LwQYrO7Fm4/2//KCVWg%3D' (2025-09-28)
• Updated input 'zig':
'github:mitchellh/zig-overlay/c61bcd43e55cb807e2a130621c6d96aa1d3c1187?narHash=sha256-CqdkqSDbyGQPPKiVSYmSG8LtWVxKyBdUE6Unz77rTeU%3D' (2025-09-29)
→ 'github:mitchellh/zig-overlay/0bcd1401ed43d10f10cbded49624206553e92f57?narHash=sha256-0BWJgt4OSzxCESij5oo8WLWrPZ%2B1qLp8KUQe32QeV4Q%3D' (2025-09-30)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2