My configuration. Probably nothing to look for here.
eb65f33ee0
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/a1185f4064c18a5db37c5c84e5638c78b46e3341?narHash=sha256-DDe16FJk18sadknQKKG/9FbwEro7A57tg9vB5kxZ8kY%3D' (2025-03-16)
→ 'github:NixOS/nixpkgs/da044451c6a70518db5b730fe277b70f494188f1?narHash=sha256-IhnK4LhkBlf14/F8THvUy3xi/TxSQkp9hikfDZRD4Ic%3D' (2025-03-18)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/c80f6a7e10b39afcc1894e02ef785b1ad0b0d7e5?narHash=sha256-C7jVfohcGzdZRF6DO%2BybyG/sqpo1h6bZi9T56sxLy%2Bk%3D' (2025-03-15)
→ 'github:NixOS/nixpkgs/b6eaf97c6960d97350c584de1b6dcff03c9daf42?narHash=sha256-Txwa5uO%2BqpQXrNG4eumPSD%2BhHzzYi/CdaM80M9XRLCo%3D' (2025-03-18)
• Updated input 'nur':
'github:nix-community/NUR/4f8e06510d48c74827bd46bb7cbb4a28736ffd2e?narHash=sha256-46xhej43TrWDkPUSx1SSjTMXvN%2BjnN4/GYdU3anLNK8%3D' (2025-03-18)
→ 'github:nix-community/NUR/15a5e7b0a4919a3823a1100059fee959018d512b?narHash=sha256-Ovdjsb6g4xDcVWhvrHDpnqKvnfUzh8rOuM8svKsZy1k%3D' (2025-03-19)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/c80f6a7e10b39afcc1894e02ef785b1ad0b0d7e5?narHash=sha256-C7jVfohcGzdZRF6DO%2BybyG/sqpo1h6bZi9T56sxLy%2Bk%3D' (2025-03-15)
→ 'github:nixos/nixpkgs/b6eaf97c6960d97350c584de1b6dcff03c9daf42?narHash=sha256-Txwa5uO%2BqpQXrNG4eumPSD%2BhHzzYi/CdaM80M9XRLCo%3D' (2025-03-18)
• Updated input 'pre-commit-hooks':
'github:cachix/pre-commit-hooks.nix/59f17850021620cd348ad2e9c0c64f4e6325ce2a?narHash=sha256-b4SZc6TkKw8WQQssbN5O2DaCEzmFfvSTPYHlx/SFW9Y%3D' (2025-03-15)
→ 'github:cachix/pre-commit-hooks.nix/ea26a82dda75bee6783baca6894040c8e6599728?narHash=sha256-QmF0proyjXI9YyZO9GZmc7/uEu5KVwCtcdLsKSoxPAI%3D' (2025-03-18)
|
||
|---|---|---|
| hosts | ||
| modules | ||
| pkgs | ||
| secrets | ||
| shared | ||
| .envrc | ||
| .gitattributes | ||
| .gitignore | ||
| data.nix | ||
| flake.lock | ||
| flake.nix | ||
| LICENSE | ||
| README.md | ||
| secrets.nix | ||
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-b.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2