My configuration. Probably nothing to look for here.
cb153a53db
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/9d3d080aec2a35e05a15cedd281c2384767c2cfe?narHash=sha256-Gs076ot1YuAAsYVcyidLKUMIc4ooOaRGO0PqTY7sBzA%3D' (2025-02-17)
→ 'github:nix-community/home-manager/f6af7280a3390e65c2ad8fd059cdc303426cbd59?narHash=sha256-zFL6zsf/5OztR1NSNQF33dvS1fL/BzVUjabZq4qrtY4%3D' (2025-03-17)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/113cd3916682def185290145924fa30b30bda972?narHash=sha256-SrvP0G0fxz35lvQxBhAeJOl6%2BBueIsxJ4azMX%2Bl/kAU%3D' (2025-03-17)
→ 'github:NixOS/nixos-hardware/4f4d97d7b7be387286cc9c988760a7ebaa5be1f1?narHash=sha256-3fwpN7KN226ghLlpO9TR0/WpgQOmOj1e8bieUxpIYSk%3D' (2025-03-17)
• Updated input 'nur':
'github:nix-community/NUR/78438dab3df8c1d8ea1141338c61367c8b0c86a4?narHash=sha256-hufNEFB9juTpj/eF6vzMI90UkEWoFSZWSDJhb2WKR88%3D' (2025-03-17)
→ 'github:nix-community/NUR/4f8e06510d48c74827bd46bb7cbb4a28736ffd2e?narHash=sha256-46xhej43TrWDkPUSx1SSjTMXvN%2BjnN4/GYdU3anLNK8%3D' (2025-03-18)
• Updated input 'zig':
'github:mitchellh/zig-overlay/b6d9078190d89f3be4eb241adbd7a66b7217b9a0?narHash=sha256-jA1rXa53IJvcM8qh0OlVz601ITVKbVLd5meXdtgW34E%3D' (2025-03-17)
→ 'github:mitchellh/zig-overlay/4460454c2f81e833dcce79378b02353403d6514b?narHash=sha256-pG0q/oygY/Kprk4V4CYFLB8G3LGPNFtswPSBqmNX/h4%3D' (2025-03-17)
|
||
|---|---|---|
| hosts | ||
| modules | ||
| pkgs | ||
| secrets | ||
| shared | ||
| .envrc | ||
| .gitattributes | ||
| .gitignore | ||
| data.nix | ||
| flake.lock | ||
| flake.nix | ||
| LICENSE | ||
| README.md | ||
| secrets.nix | ||
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2