cf86fa98a6
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/c2448301fb856e351aab33e64c33a3fc8bcf637d?narHash=sha256-HiRDeUOD1VLklHeOmaKDzf%2B8Hb7vSWPVFcWwaTrpm%2BU%3D' (2025-11-10)
→ 'github:NixOS/nixpkgs/3acb677ea67d4c6218f33de0db0955f116b7588c?narHash=sha256-A5LS0AJZ1yDPTa2fHxufZN%2B%2Bn8MCmtgrJDtxFxrH4S8%3D' (2025-11-13)
• Updated input 'nur':
'github:nix-community/NUR/3f88d4e8f330dd9f89937855ddd1168130cfaf7c?narHash=sha256-I08YV5fkB7csLog%2BtC4a79cp%2B55/NigfE39g6Ytzw90%3D' (2025-11-14)
→ 'github:nix-community/NUR/d02b08b0ea3ebd4535c22dc12e4d840c897f2bc8?narHash=sha256-ysBTtgkBkDY9BWfvxHW9riBw7N4v42CQBHEmsmOSCnY%3D' (2025-11-15)
• Updated input 'zig':
'github:mitchellh/zig-overlay/b253aba51b380bb9e229b033c6e9251350a036f6?narHash=sha256-jI4s1W97XyMEEoePnknrSzzjaq1aHvt6/P5Oj5xJAxY%3D' (2025-11-14)
→ 'github:mitchellh/zig-overlay/5a1ffbe537632fc6354aabefeb52050b04d0aa4d?narHash=sha256-kO8sB2GQeHYGkc32JkSgLK6zbzVuEG%2BjHxB9E7S2uIw%3D' (2025-11-14)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
$ nix why-depends .#nixosConfigurations.vno1-gdrx.config.system.build.toplevel .#legacyPackages.x86_64-linux.mbedtls_2
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2