No description
Find a file
Jakob Lechner 3e59ed36dc flake.lock: Update
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/146f45bee02b8bd88812cfce6ffc0f933788875a?narHash=sha256-7lVWL5bC6xBIMWWDal41LlGAG%2B9u2zUorqo3QCUL4p4%3D' (2025-09-10)
  → 'github:nix-community/disko/67ff9807dd148e704baadbd4fd783b54282ca627?narHash=sha256-IGmaEf3Do8o5Cwp1kXBN1wQmZwQN3NLfq5t4nHtVtcU%3D' (2025-09-19)
• Updated input 'home-manager':
    'github:nix-community/home-manager/f21d9167782c086a33ad53e2311854a8f13c281e?narHash=sha256-K6PEI5PYY94TVMH0mX3MbZNYFme7oNRKml/85BpRRAo%3D' (2025-09-14)
  → 'github:nix-community/home-manager/3b955f5f0a942f9f60cdc9cacb7844335d0f21c3?narHash=sha256-uhzsV0Q0I9j2y/rfweWeGif5AWe0MGrgZ/3TjpDYdGA%3D' (2025-09-21)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/e9b7f2ff62b35f711568b1f0866243c7c302028d?narHash=sha256-uLwwHFCZnT1c3N3biVe/0hCkag2GSrf9%2BM56%2BOkf%2BWY%3D' (2025-09-17)
  → 'github:nixos/nixpkgs/b2a3852bd078e68dd2b3dfa8c00c67af1f0a7d20?narHash=sha256-afXE7AJ7MY6wY1pg/Y6UPHNYPy5GtUKeBkrZZ/gC71E%3D' (2025-09-20)
• Updated input 'nixpkgsMaster':
    'github:NixOS/nixpkgs/24d7757b06ccd2ab95ad9661e8461f1a84c29f88?narHash=sha256-%2BZA/6rNgzgn8U05eexkdme2eTDbW5MpRTrqpg2Sc2cE%3D' (2025-09-17)
  → 'github:NixOS/nixpkgs/5ae8f56b82f8abd42c13b5f11de89f5346afec5e?narHash=sha256-OL0/5FQQc06oiF/l90H0/lVz7wvC7QR3Yptpizckr3Y%3D' (2025-09-22)
• Updated input 'nur':
    'github:nix-community/NUR/32b846c44f3af23fe35a5169e072764ee9116eb8?narHash=sha256-8OL31Mu6nHWJbzNar/1SQcUcil7lU0o7r3dGycydKr8%3D' (2025-09-17)
  → 'github:nix-community/NUR/79e546908e49b0a824a7ac4827f8563452b002e7?narHash=sha256-L6Bl4No41Ohag4/Ty0IMDE5EP56TPOfU2YaDLt59iFY%3D' (2025-09-22)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/c23193b943c6c689d70ee98ce3128239ed9e32d1?narHash=sha256-hLEO2TPj55KcUFUU1vgtHE9UEIOjRcH/4QbmfHNF820%3D' (2025-09-13)
  → 'github:nixos/nixpkgs/8eaee110344796db060382e15d3af0a9fc396e0e?narHash=sha256-iCGWf/LTy%2BaY0zFu8q12lK8KuZp7yvdhStehhyX1v8w%3D' (2025-09-19)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/f77d4cfa075c3de66fc9976b80e0c4fc69e2c139?narHash=sha256-HYnwlbY6RE5xVd5rh0bYw77pnD8lOgbT4mlrfjgNZ0c%3D' (2025-09-16)
  → 'github:Mic92/sops-nix/e0fdaea3c31646e252a60b42d0ed8eafdb289762?narHash=sha256-L3N8zV6wsViXiD8i3WFyrvjDdz76g3tXKEdZ4FkgQ%2BY%3D' (2025-09-21)
• Updated input 'vesc-tool':
    'github:vedderb/vesc_tool/467e44ede9bd89fd87a075b00156455eba96fb19?narHash=sha256-xXBzVuKmkre9bHB/0f3c9ZvX41P1qWqap0Q%2BWHh1cqQ%3D' (2025-09-14)
  → 'github:vedderb/vesc_tool/9dab0663d4d47067c30ec4ca6aee074e6e69060b?narHash=sha256-VtvAfGNKgBuxnxdatFt6LMXu682NensmioggVl%2BJmRY%3D' (2025-09-19)
2025-09-22 11:05:47 +02:00
.git-crypt Rotate git-crypt key 2024-01-31 01:39:35 +00:00
custom-utils Fix duplicate port check 2025-04-16 22:54:29 +02:00
hosts Replace ddclient with godns 2025-09-16 11:29:09 +02:00
modules Add udev module 2025-09-09 12:38:14 +02:00
nix-cache Add nix-cache 2025-09-03 22:17:28 +02:00
pkgs Add prometheus for home network 2025-09-15 18:14:24 +02:00
users Use vesc only on copper 2025-09-17 00:23:12 +02:00
.editorconfig Add config for .nix files 2022-04-27 11:02:38 +00:00
.envrc Use flakes 2021-11-17 09:33:48 +00:00
.gitattributes Add custom voicemail greeting 2023-11-22 14:55:29 +00:00
.gitignore Ignore qcow2 files (QEMU disk images) 2023-02-23 19:41:15 +00:00
.sops.yaml Reinstall magnesium 2025-04-09 10:27:38 +02:00
flake.lock flake.lock: Update 2025-09-22 11:05:47 +02:00
flake.nix Exclude .envrc from pre-commit checks 2025-09-03 21:37:31 +02:00
justfile Use file to unlock LUKS from usb media 2025-04-09 10:20:44 +02:00
README.md Add instructions how to build a system config 2025-01-11 19:24:15 +01:00

jalr's NixOS Configuration

Install a new host

This installs nixos on host somehost:

NixOS Anywhere

nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>

The traditional way

nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'

Build a configuration

nix build .#nixosConfigurations.iron.config.system.build.toplevel

setting up sops

Get the host key and convert it.

ssh-keyscan -t ed25519 $host | ssh-to-age

Then add the key to .sops.yaml

If the key changed, you might want to run

sops updatekeys hosts/$host/secrets.yaml

nix repl

start an interactive environment for evaluating Nix expressions

$ nix repl

nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl

nix-repl> :lf .#

Import GPG public key

gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5

Debugging boot issues

  1. Add rd.systemd.debug_shell kernel parameter
  2. Press CTRL+ALT+F9 to switch to root shell