d4ec666ce9
Flake lock file updates:
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/9368056b73efb46eb14fd4667b99e0f81b805f28?narHash=sha256-Ry1gd1BQrNVJJfT11cpVP0FY8XFMx4DJV2IDp01CH9w%3D' (2025-08-04)
→ 'github:NixOS/nixos-hardware/26ed7a0d4b8741fe1ef1ee6fa64453ca056ce113?narHash=sha256-dz303vGuzWjzOPOaYkS9xSW%2BB93PSAJxvBd6CambXVA%3D' (2025-08-07)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/5b09dc45f24cf32316283e62aec81ffee3c3e376?narHash=sha256-Q/I2xJn/j1wpkGhWkQnm20nShYnG7TI99foDBpXm1SY%3D' (2025-08-03)
→ 'github:NixOS/nixpkgs/c2ae88e026f9525daf89587f3cbee584b92b6134?narHash=sha256-erbiH2agUTD0Z30xcVSFcDHzkRvkRXOQ3lb887bcVrs%3D' (2025-08-06)
• Updated input 'nur':
'github:nix-community/NUR/13fdbbd92ecc6ce8f3957aa1b32965d3b48bbd79?narHash=sha256-lHDDqBV3MkJj/5nVlO%2B/dY0jwfYeXRRbNNnGHJVU9Qk%3D' (2025-08-07)
→ 'github:nix-community/NUR/45c56bf867424cd5f48d859ecfce5bd9be7e06c2?narHash=sha256-OVJLjFOy4ZdTctADjvTH6tb3%2B/lUo2ak5nWZrLFdMCA%3D' (2025-08-07)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/5b09dc45f24cf32316283e62aec81ffee3c3e376?narHash=sha256-Q/I2xJn/j1wpkGhWkQnm20nShYnG7TI99foDBpXm1SY%3D' (2025-08-03)
→ 'github:nixos/nixpkgs/c2ae88e026f9525daf89587f3cbee584b92b6134?narHash=sha256-erbiH2agUTD0Z30xcVSFcDHzkRvkRXOQ3lb887bcVrs%3D' (2025-08-06)
• Updated input 'zig':
'github:mitchellh/zig-overlay/e2f399caf467a5cabfab39b35ca9d01b54500a9c?narHash=sha256-Cxfld3iyGhOr6ipDyHC5ViVyJsnBKinm2hybyPTahOE%3D' (2025-08-07)
→ 'github:mitchellh/zig-overlay/ebf25e33acf21034d7b5b618a91d60f8aa75c6ec?narHash=sha256-h/FHxaWb5BqxNhFcOksUQpCup0JeV0nQIDTvSIAUmoU%3D' (2025-08-07)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2