fff690a30f
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/b1b3291469652d5a2edb0becc4ef0246fff97a7c?narHash=sha256-wY1%2B2JPH0ZZC4BQefoZw/k%2B3%2BDowFyfOxv17CN/idKs%3D' (2025-08-23)
→ 'github:NixOS/nixpkgs/4e7667a90c167f7a81d906e5a75cba4ad8bee620?narHash=sha256-TH1SfSP523QI7kcPiNtMAEuwZR3Jdz0MCDXPs7TS8uo%3D' (2025-08-26)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/3b9f00d7a7bf68acd4c4abb9d43695afb04e03a5?narHash=sha256-XexyKZpf46cMiO5Vbj%2BdWSAXOnr285GHsMch8FBoHbc%3D' (2025-08-25)
→ 'github:NixOS/nixpkgs/8a6d5427d99ec71c64f0b93d45778c889005d9c2?narHash=sha256-cr748nSmpfvnhqSXPiCfUPxRz2FJnvf/RjJGvFfaCsM%3D' (2025-08-27)
• Updated input 'nur':
'github:nix-community/NUR/9824fee9eb7676a3624d8dcf8e36879fdbe5ccf6?narHash=sha256-ao6Bmp1ktX933EEGVEk22Poi2FwimF/GROZf2kioB5o%3D' (2025-08-27)
→ 'github:nix-community/NUR/eb506ce913d0e2ac0207590a8ca1f3bc23cb9993?narHash=sha256-jLuVYMCn8Yds2eiiEd5FCsgdZ%2Bivdz8mtKOxrgaKk%2BA%3D' (2025-08-28)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/3b9f00d7a7bf68acd4c4abb9d43695afb04e03a5?narHash=sha256-XexyKZpf46cMiO5Vbj%2BdWSAXOnr285GHsMch8FBoHbc%3D' (2025-08-25)
→ 'github:nixos/nixpkgs/8a6d5427d99ec71c64f0b93d45778c889005d9c2?narHash=sha256-cr748nSmpfvnhqSXPiCfUPxRz2FJnvf/RjJGvFfaCsM%3D' (2025-08-27)
• Updated input 'zig':
'github:mitchellh/zig-overlay/ac68d1343a42011bc14d397158d17d759c923780?narHash=sha256-JqCbYt8Z6oK5HPGL%2BN259xsY8XB9q1iOoTnxtdmANb0%3D' (2025-08-25)
→ 'github:mitchellh/zig-overlay/9c355087af16610504c2ebacf148b1fa4f3fc474?narHash=sha256-DabCVD8lqlG%2B2pHAiWuqmWh2JlMKCLcFpaH10HLjx0k%3D' (2025-08-28)
Config
Flakes:
$ deploy --interactive '#fwminex'
$ nix build .#deploy.nodes.fra1-c.profiles.system.path
Other:
$ nix build .#nixosConfigurations.vno3-rp3b.config.system.build.toplevel
$ nix eval .#nixosConfigurations.fwminex.config.services.nsd
Encoding host-only secrets
Encode a secret on host:
rage -e -r "$(cat /etc/ssh/ssh_host_ed25519_key.pub)" -o secret.age /path/to/plaintext
Decode a secret on host (to test things out):
rage -d -i /etc/ssh/ssh_host_ed25519_key secret.age
Borg
BORG_PASSCOMMAND="cat /run/agenix/borgbackup-fwminex" borg --remote-path=borg1 list zh2769@zh2769.rsync.net:fwminex.jakst.vpn-home-motiejus-annex2