d7452e898c
Flake lock file updates:
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/9c0ee5dfa186e10efe9b53505b65d22c81860fde?narHash=sha256-INBZnPA9JzyDn%2BFnni2250PbRzKx7Eafz0T2c7NhXiQ%3D' (2025-10-28)
→ 'github:NixOS/nixos-hardware/2379bc40992ec29feb1933bb4acd224fa055f3f8?narHash=sha256-zuiwvKAPwtMmwf44tb7Q7Y5d7JkBeuaF89PISUnkWA8%3D' (2025-10-29)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/6a08e6bb4e46ff7fcbb53d409b253f6bad8a28ce?narHash=sha256-Q/uhWNvd7V7k1H1ZPMy/vkx3F8C13ZcdrKjO7Jv7v0c%3D' (2025-10-25)
→ 'github:NixOS/nixpkgs/08dacfca559e1d7da38f3cf05f1f45ee9bfd213c?narHash=sha256-o9KF3DJL7g7iYMZq9SWgfS1BFlNbsm6xplRjVlOCkXI%3D' (2025-10-28)
• Updated input 'nur':
'github:nix-community/NUR/914345a6f31195c8718b9edc00ef88291223a1a2?narHash=sha256-mhZzA8Z7TzYiuTGPqA3EYqX2WpB7SVrLtsRUd5P2OwA%3D' (2025-10-29)
→ 'github:nix-community/NUR/4f741bbe5930613393a882ae2c7cf8ce989515e7?narHash=sha256-DGw%2BAixtf3M7pw9WkdaJtwAJSmdmDz4l9LxTU8/mdjY%3D' (2025-10-30)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/6a08e6bb4e46ff7fcbb53d409b253f6bad8a28ce?narHash=sha256-Q/uhWNvd7V7k1H1ZPMy/vkx3F8C13ZcdrKjO7Jv7v0c%3D' (2025-10-25)
→ 'github:nixos/nixpkgs/08dacfca559e1d7da38f3cf05f1f45ee9bfd213c?narHash=sha256-o9KF3DJL7g7iYMZq9SWgfS1BFlNbsm6xplRjVlOCkXI%3D' (2025-10-28)
• Updated input 'zig':
'github:mitchellh/zig-overlay/d0f239b887b1ac736c0f3dde91bf5bf2ecf3a420?narHash=sha256-wNB/W3x%2Bor4mdNxFPNOH5/WFckNpKgFRZk7OnOsLtm0%3D' (2025-10-18)
→ 'github:mitchellh/zig-overlay/a5150d558dc58769d4309437e1ff3d9d473fb548?narHash=sha256-80VmB/MA/Lx3T6LyLjzVMIgih9aZZm6DU8htC4k5nxU%3D' (2025-10-29)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
$ nix why-depends .#nixosConfigurations.vno1-gdrx.config.system.build.toplevel .#legacyPackages.x86_64-linux.mbedtls_2
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2