e348599308
Flake lock file updates:
• Updated input 'nix-index-database':
'github:Mic92/nix-index-database/66537fb185462ba9b07f4e6f2d54894a1b2d04ab?narHash=sha256-koZtlJRqi0/MD/AKd0KrXLA2NuBOVzlIyAJprjzpxZE%3D' (2025-03-10)
→ 'github:Mic92/nix-index-database/5c77c6d6f2e8cc6007c2b1a4df1a507834404a67?narHash=sha256-CUy00dj513aIvtN2NGiDKLCVEQSz4xHWSDf229EiJdU%3D' (2025-03-16)
• Updated input 'nur':
'github:nix-community/NUR/ac44f81220a373c823ad72b57eb1371fe65c9ce4?narHash=sha256-gwUhr8bmCzXvwZ6DBmQl7YkYWYakGugMfG6Mg3Y4vc0%3D' (2025-03-15)
→ 'github:nix-community/NUR/86b51446dadce3e3a85bc0211a09f938664a0208?narHash=sha256-neenUewjVHIYZKHTwBCfahK%2BMZ08g4Rh5GMYAT74Nfs%3D' (2025-03-16)
• Updated input 'pre-commit-hooks':
'github:cachix/pre-commit-hooks.nix/b5a62751225b2f62ff3147d0a334055ebadcd5cc?narHash=sha256-srpAbmJapkaqGRE3ytf3bj4XshspVR5964OX5LfjDWc%3D' (2025-03-07)
→ 'github:cachix/pre-commit-hooks.nix/59f17850021620cd348ad2e9c0c64f4e6325ce2a?narHash=sha256-b4SZc6TkKw8WQQssbN5O2DaCEzmFfvSTPYHlx/SFW9Y%3D' (2025-03-15)
• Updated input 'zig':
'github:mitchellh/zig-overlay/0b14285e283f5a747f372fb2931835dd937c4383?narHash=sha256-aeopo%2BaXg5I2IksOPFN79usw7AeimH1%2BtjfuMzJHFdk%3D' (2025-03-13)
→ 'github:mitchellh/zig-overlay/0dc9ae60eda504251aa2fb4304720a4aaea66b88?narHash=sha256-dF%2B9ptTay1hu8nSxn5rFBILUwQPGDrJ9lXwo2hCianE%3D' (2025-03-16)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2