e566f616de
Flake lock file updates:
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/52113c4f5cfd1e823001310e56d9c8d0699a6226?narHash=sha256-hv1mG5j5PTbnWbtHHomzTus77pIxsc4x8VrMjc7%2B/YE%3D' (2025-11-06)
→ 'github:NixOS/nixos-hardware/899dc449bc6428b9ee6b3b8f771ca2b0ef945ab9?narHash=sha256-BWWnUUT01lPwCWUvS0p6Px5UOBFeXJ8jR%2BZdLX8IbrU%3D' (2025-11-11)
• Updated input 'nur':
'github:nix-community/NUR/cdcd0d8e61075b55ca72d094e7c8b055c2ccb9a3?narHash=sha256-6vMVp5I7ntaBNgV4jZHmKYqeoDW8jXenzGrwwl7nbv8%3D' (2025-11-11)
→ 'github:nix-community/NUR/850d207e1adb623add7cb312e4a7b133633816df?narHash=sha256-7Hn7uy8Kd7H3H3fch3mtgELHgPKq%2BK5tcNiaSSnvzLA%3D' (2025-11-12)
• Updated input 'pre-commit-hooks':
'github:cachix/pre-commit-hooks.nix/8e7576e79b88c16d7ee3bbd112c8d90070832885?narHash=sha256-j%2BrNQ119ffYUkYt2YYS6rnd6Jh/crMZmbqpkGLXaEt0%3D' (2025-11-06)
→ 'github:cachix/pre-commit-hooks.nix/c5c3147730384576196fb5da048a6e45dee10d56?narHash=sha256-QqS72GvguP56oKDNUckWUPNJHjsdeuXh5RyoKz0wJ%2BE%3D' (2025-11-11)
• Updated input 'zig':
'github:mitchellh/zig-overlay/0c38847aa46a16be2c47915766a77ca186d0f845?narHash=sha256-wUXIrR2jsjIWRh1D8m7ZFgwRXTcaOb/h%2B3U1FnhuFAw%3D' (2025-11-11)
→ 'github:mitchellh/zig-overlay/d16453ee78765e49527c56d23386cead799b6b53?narHash=sha256-VNW/%2BVYIg6N4b9Iq%2BF0YZmm22n74IdFS7hsPLblWuOY%3D' (2025-11-12)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
$ nix why-depends .#nixosConfigurations.vno1-gdrx.config.system.build.toplevel .#legacyPackages.x86_64-linux.mbedtls_2
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2