jalr/nixos-configuration
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
1094 commits 20 branches 0 tags 3.1 MiB
Find a file
Jakob Lechner 0128856c8e flake.lock: Update 
Flake lock file updates:

• Updated input 'nixos-hardware':
    'github:nixos/nixos-hardware/67a709cfe5d0643dafd798b0b613ed579de8be05?narHash=sha256-w6cDExPBqbq7fTLo4dZ1ozDGeq3yV6dSN4n/sAaS6OM%3D' (2025-09-15)
  → 'github:nixos/nixos-hardware/170ff93c860b2a9868ed1e1102d4e52cb3d934e1?narHash=sha256-6CFdj7Xs616t1W4jLDH7IohAAvl5Dyib3qEv/Uqw1rk%3D' (2025-09-23)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/b2a3852bd078e68dd2b3dfa8c00c67af1f0a7d20?narHash=sha256-afXE7AJ7MY6wY1pg/Y6UPHNYPy5GtUKeBkrZZ/gC71E%3D' (2025-09-20)
  → 'github:nixos/nixpkgs/25e53aa156d47bad5082ff7618f5feb1f5e02d01?narHash=sha256-F8WmEwFoHsnix7rt290R0rFXNJiMbClMZyIC/e%2BHYf0%3D' (2025-09-25)
• Updated input 'nixpkgsMaster':
    'github:NixOS/nixpkgs/5ae8f56b82f8abd42c13b5f11de89f5346afec5e?narHash=sha256-OL0/5FQQc06oiF/l90H0/lVz7wvC7QR3Yptpizckr3Y%3D' (2025-09-22)
  → 'github:NixOS/nixpkgs/1913e602e8813cf11a97496a5f27a1ec5a155e31?narHash=sha256-nlrZS5AfCXsYCh16zU46yZmDBzqutMhIJB9eV4djn%2B0%3D' (2025-09-29)
• Updated input 'nur':
    'github:nix-community/NUR/79e546908e49b0a824a7ac4827f8563452b002e7?narHash=sha256-L6Bl4No41Ohag4/Ty0IMDE5EP56TPOfU2YaDLt59iFY%3D' (2025-09-22)
  → 'github:nix-community/NUR/660590c6a1e82e6940eadb77b37f70dd878e8633?narHash=sha256-DjFjObnO5IQWx11lzQvcQW7CsK7ltLNnvMcodoCA7r4%3D' (2025-09-29)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/8eaee110344796db060382e15d3af0a9fc396e0e?narHash=sha256-iCGWf/LTy%2BaY0zFu8q12lK8KuZp7yvdhStehhyX1v8w%3D' (2025-09-19)
  → 'github:nixos/nixpkgs/e9f00bd893984bc8ce46c895c3bf7cac95331127?narHash=sha256-0m27AKv6ka%2Bq270dw48KflE0LwQYrO7Fm4/2//KCVWg%3D' (2025-09-28)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/e0fdaea3c31646e252a60b42d0ed8eafdb289762?narHash=sha256-L3N8zV6wsViXiD8i3WFyrvjDdz76g3tXKEdZ4FkgQ%2BY%3D' (2025-09-21)
  → 'github:Mic92/sops-nix/9ac51832c70f2ff34fcc97b05fa74b4a78317f9e?narHash=sha256-53VP3BqMXJqD1He1WADTFyUnpta3mie56H7nC59tSic%3D' (2025-09-28)
• Updated input 'vesc-tool':
    'github:vedderb/vesc_tool/9dab0663d4d47067c30ec4ca6aee074e6e69060b?narHash=sha256-VtvAfGNKgBuxnxdatFt6LMXu682NensmioggVl%2BJmRY%3D' (2025-09-19)
  → 'github:vedderb/vesc_tool/e8aa8ce856c7da7a88337ddbefde6a4b789bfa8f?narHash=sha256-mY2sXocI%2Bk3Hky%2BTavQlko2UuOm1q7Tu%2B5Xz2wIQ6Wk%3D' (2025-09-23)
2025-09-29 13:48:31 +02:00
.git-crypt Rotate git-crypt key 2024-01-31 01:39:35 +00:00
custom-utils Fix duplicate port check 2025-04-16 22:54:29 +02:00
hosts Add TvProxy 2025-09-22 22:52:39 +02:00
modules Add Rules for Raspberry Pi Pico and WCH Link 2025-09-23 21:38:53 +02:00
nix-cache Add nix-cache 2025-09-03 22:17:28 +02:00
pkgs Add prometheus for home network 2025-09-15 18:14:24 +02:00
users Use vesc only on copper 2025-09-17 00:23:12 +02:00
.editorconfig Add config for .nix files 2022-04-27 11:02:38 +00:00
.envrc Use flakes 2021-11-17 09:33:48 +00:00
.gitattributes Add TvProxy 2025-09-22 22:52:39 +02:00
.gitignore Ignore qcow2 files (QEMU disk images) 2023-02-23 19:41:15 +00:00
.sops.yaml Reinstall magnesium 2025-04-09 10:27:38 +02:00
flake.lock flake.lock: Update 2025-09-29 13:48:31 +02:00
flake.nix Exclude .envrc from pre-commit checks 2025-09-03 21:37:31 +02:00
justfile Use file to unlock LUKS from usb media 2025-04-09 10:20:44 +02:00
README.md Add instructions how to build a system config 2025-01-11 19:24:15 +01:00

README.md

jalr's NixOS Configuration

Install a new host

This installs nixos on host somehost:

NixOS Anywhere

nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>

The traditional way

nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'

Build a configuration

nix build .#nixosConfigurations.iron.config.system.build.toplevel

setting up sops

Get the host key and convert it.

ssh-keyscan -t ed25519 $host | ssh-to-age

Then add the key to .sops.yaml

If the key changed, you might want to run

sops updatekeys hosts/$host/secrets.yaml

nix repl

start an interactive environment for evaluating Nix expressions

$ nix repl

nix-repl> a=builtins.getFlake (toString ./.)

$ nix repl

nix-repl> :lf .#

Import GPG public key

gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5

Debugging boot issues

  1. Add rd.systemd.debug_shell kernel parameter
  2. Press CTRL+ALT+F9 to switch to root shell