c06efd9afd
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/4fb695d10890e9fc6a19deadf85ff79ffb78da86?narHash=sha256-CPM7zm6csUx7vSfKvzMDIjepEJv1u/usmaT7zydzbuI%3D' (2025-08-21)
→ 'github:nix-community/home-manager/4a44fb9f7555da362af9d499817084f4288a957f?narHash=sha256-OILVkfhRCm8u18IZ2DKR8gz8CVZM2ZcJmQBXmjFLIfk%3D' (2025-08-23)
• Updated input 'nix-index-database':
'github:Mic92/nix-index-database/ebbc1c05f786ae39bb5e04e57bf2c10c44a649e3?narHash=sha256-Q6ZxZDBmD/B988Jjbx7/NchxOKIpOKBBrx9Yb0zMzpQ%3D' (2025-08-17)
→ 'github:Mic92/nix-index-database/52dec1cb33a614accb9e01307e17816be974d24d?narHash=sha256-rfTBWuTXi9/X7GhtF562FKNXKh2kvKb6dwI5lV1SjPE%3D' (2025-08-24)
• Updated input 'nur':
'github:nix-community/NUR/9055bc8750ab86fb5195f03d826de20450f9cc38?narHash=sha256-pPsRgiD1m7IOJ0C3lzUzvk7Bq4qLOa7EpQ09QOdcM5g%3D' (2025-08-22)
→ 'github:nix-community/NUR/12e8be26cf39b4e3a3a303a3c3b8034667f4c1f8?narHash=sha256-FTEAUDUYH/7uHBkEq4V5%2B9JJHH7alvDmeS6YDJIpDxE%3D' (2025-08-24)
• Updated input 'pre-commit-hooks':
'github:cachix/pre-commit-hooks.nix/4b04db83821b819bbbe32ed0a025b31e7971f22e?narHash=sha256-I0Ok1OGDwc1jPd8cs2VvAYZsHriUVFGIUqW%2B7uSsOUM%3D' (2025-08-17)
→ 'github:cachix/pre-commit-hooks.nix/e891a93b193fcaf2fc8012d890dc7f0befe86ec2?narHash=sha256-RF7j6C1TmSTK9tYWO6CdEMtg6XZaUKcvZwOCD2SICZs%3D' (2025-08-23)
• Updated input 'zig':
'github:mitchellh/zig-overlay/714fae26049a263ff2e4641ce7c973f371f4b005?narHash=sha256-J0Cxren2QLeI0ZvRZw4XGcMm4q3uPIZHM%2BeJnaZfXX8%3D' (2025-08-19)
→ 'github:mitchellh/zig-overlay/e010faa4eb9271b81cb6c30c828d972028465deb?narHash=sha256-dogbHGpLmwfu0qkM/vntqMYazfi66DXWSQiCR1rxC4M%3D' (2025-08-23)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2