No description
Flake lock file updates:
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/617579a787259b9a6419492eaac670a5f7663917' (2024-03-04)
→ 'github:nixos/nixpkgs/b94a96839afcc56de3551aa7472b8d9a3e77e05d' (2024-03-09)
• Updated input 'nixpkgsMaster':
'github:NixOS/nixpkgs/0cfd293af3249b214085553e0ef053141f32099a' (2024-03-05)
→ 'github:NixOS/nixpkgs/7e0c071ac153adc8a3157042e5f474682c86a991' (2024-03-10)
• Updated input 'nur':
'github:nix-community/NUR/c715d34e7040f934a2edfa7024a1f04e86536b9e' (2024-03-05)
→ 'github:nix-community/NUR/0fc60d25043f9cda4549e6656fea6787cbdd095f' (2024-03-10)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/291aad29b59ceda517a06e59809f35cb0bb17c6b' (2024-03-04)
→ 'github:Mic92/sops-nix/f8d5c8baa83fe620a28c0db633be9db3e34474b4' (2024-03-10)
• Updated input 'sops-nix/nixpkgs-stable':
'github:NixOS/nixpkgs/66d65cb00b82ffa04ee03347595aa20e41fe3555' (2024-03-03)
→ 'github:NixOS/nixpkgs/b17375d3bb7c79ffc52f3538028b2ec06eb79ef8' (2024-03-10)
|
||
|---|---|---|
| .git-crypt | ||
| custom-utils | ||
| home-manager | ||
| hosts | ||
| modules | ||
| pkgs | ||
| .editorconfig | ||
| .envrc | ||
| .gitattributes | ||
| .gitignore | ||
| .sops.yaml | ||
| flake.lock | ||
| flake.nix | ||
| justfile | ||
| README.md | ||
home-manager
https://github.com/nix-community/home-manager
For a systematic overview of Home Manager and its available options, please see
- the Home Manager manual and
- the Home Manager configuration options.
Install a new host
This installs nixos on host somehost:
nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'
setting up sops
Get the host key and convert it.
ssh-keyscan -t ed25519 $host | ssh-to-age
Then add the key to .sops.yaml
If the key changed, you might want to run
sops updatekeys hosts/$host/secrets.yaml
nix repl
start an interactive environment for evaluating Nix expressions
$ nix repl
nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl
nix-repl> :lf .#
Import GPG public key
gpg --card-edit
gpg/card> fetch