d686f0ad0d
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/5ed4e25ab58fd4c028b59d5611e14ea64de51d23?narHash=sha256-TvODmeR2W7yX/JmOCmP%2BlAFNkTT7hAxYcF3Kz8SZV3w%3D' (2025-09-29)
→ 'github:NixOS/nixpkgs/5b5be50345d4113d04ba58c444348849f5585b4a?narHash=sha256-FIBE1qXv9TKvSNwst6FumyHwCRH3BlWDpfsnqRDCll0%3D' (2025-10-01)
• Updated input 'nur':
'github:nix-community/NUR/659e202831efa7ceaecd29b906a6630aaf032178?narHash=sha256-BRm8732/E5JhmWh3AiQe0e9haj28SvIE7h8o%2B3kFCdE%3D' (2025-10-01)
→ 'github:nix-community/NUR/6cd1e6cba3414180e1eb178eaa9004e0f274390f?narHash=sha256-udVYo1KRhCto68Dm2vS2mQQwHYvjzNV72OfwwGsuj8Q%3D' (2025-10-02)
• Updated input 'zig':
'github:mitchellh/zig-overlay/ca90f815b624cff3ddc12b7f965ff93c389febb1?narHash=sha256-eBi3Vrpug2pnxbCratMazcB0jycu0G52vHg%2BlOZT5dk%3D' (2025-10-01)
→ 'github:mitchellh/zig-overlay/642e5d16bc094fa1aa4139a37cc4fa590b46001c?narHash=sha256-hzNuoIO4WRK6txxalYz0R0pj2j94iyvJ%2BnV%2B%2BpxHbiU%3D' (2025-10-01)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2