e53de77e28
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/3ff0e34b1383648053bba8ed03f201d3466f90c9?narHash=sha256-CdX2Rtvp5I8HGu9swBmYuq%2BILwRxpXdJwlpg8jvN4tU%3D' (2025-07-24)
→ 'github:NixOS/nixpkgs/13e8d35b7d6028b7198f8186bc0347c6abaa2701?narHash=sha256-uDCFHeXdRIgJpYmtcUxGEsZ%2BhYlLPBhR83fdU%2BvbC1s%3D' (2025-07-26)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/7fd36ee82c0275fb545775cc5e4d30542899511d?narHash=sha256-9h7%2B4/53cSfQ/uA3pSvCaBepmZaz/dLlLVJnbQ%2BSJjk%3D' (2025-07-25)
→ 'github:NixOS/nixpkgs/dc9637876d0dcc8c9e5e22986b857632effeb727?narHash=sha256-cKgvtz6fKuK1Xr5LQW/zOUiAC0oSQoA9nOISB0pJZqM%3D' (2025-07-28)
• Updated input 'nur':
'github:nix-community/NUR/857227d26ebb8a1fbabf9f04dc3724c01042167b?narHash=sha256-fCbtkQ/b495zq33gCPI5yOxOvssOyI2n/2j4pMs1Oaw%3D' (2025-07-28)
→ 'github:nix-community/NUR/d27cfcd9955077c67f539d24b4db3adcbaca060a?narHash=sha256-RUC3LmgZXgfG0NtLzYjLApf1DveY7ooMck3LsetrQp0%3D' (2025-07-29)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/7fd36ee82c0275fb545775cc5e4d30542899511d?narHash=sha256-9h7%2B4/53cSfQ/uA3pSvCaBepmZaz/dLlLVJnbQ%2BSJjk%3D' (2025-07-25)
→ 'github:nixos/nixpkgs/17f6bd177404d6d43017595c5264756764444ab8?narHash=sha256-Znl7rzuxKg/Mdm6AhimcKynM7V3YeNDIcLjBuoBcmNs%3D' (2025-07-26)
• Updated input 'zig':
'github:mitchellh/zig-overlay/b680835e0e74de69f4a195dd25d8affd953d7b31?narHash=sha256-24um6FSyprsjp7RLhFQKUasyg50NP04ykrTvOdwylkQ%3D' (2025-07-28)
→ 'github:mitchellh/zig-overlay/d243a8cd4640ccff996e39c6f8bc0a7786b96847?narHash=sha256-7K22jw1n4mZVWFUFOsUL8KB5M0S0MCBdj6CrP0FKiBA%3D' (2025-07-28)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2