No description
Find a file
Jakob Lechner 8f1cea1ce6 flake.lock: Update
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/a838e83e21502a211b83373109a260e5ef5fbcf1' (2024-06-04)
  → 'github:nix-community/disko/c1cfbfad7cb45f0c177b35b59ba67d1b5fc7ca82' (2024-06-10)
• Updated input 'home-manager':
    'github:nix-community/home-manager/a631666f5ec18271e86a5cde998cba68c33d9ac6' (2024-05-26)
  → 'github:nix-community/home-manager/845a5c4c073f74105022533907703441e0464bc3' (2024-06-04)
• Updated input 'nix-pre-commit-hooks':
    'github:cachix/git-hooks.nix/0e8fcc54b842ad8428c9e705cb5994eaf05c26a0' (2024-05-20)
  → 'github:cachix/git-hooks.nix/cc4d466cb1254af050ff7bdf47f6d404a7c646d1' (2024-06-06)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/b3b2b28c1daa04fe2ae47c21bb76fd226eac4ca1' (2024-06-01)
  → 'github:nixos/nixpkgs/2819fffa7fa42156680f0d282c60d81e8fb185b7' (2024-06-09)
• Updated input 'nixpkgsMaster':
    'github:NixOS/nixpkgs/b37b08ae04af951640a9a9fcb4d1aab54603f551' (2024-06-04)
  → 'github:NixOS/nixpkgs/5b403d5f9c3dc03cc863c6c007ec5c9ed7275864' (2024-06-11)
• Updated input 'nur':
    'github:nix-community/NUR/4e7a2f26c246f795ee386acbdd45353c22417e89' (2024-06-04)
  → 'github:nix-community/NUR/d1c970b5275fb45cf32e4eff52afd798b860dbf1' (2024-06-11)
• Updated input 'poetry2nix':
    'github:nix-community/poetry2nix/11e97e742da5b4e43c27cfe13fca904e82fd4e56' (2024-06-01)
  → 'github:nix-community/poetry2nix/304f8235fb0729fd48567af34fcd1b58d18f9b95' (2024-06-09)
• Updated input 'poetry2nix/treefmt-nix':
    'github:numtide/treefmt-nix/03b982b77df58d5974c61c6022085bafe780c1cf' (2024-05-31)
  → 'github:numtide/treefmt-nix/3eb96ca1ae9edf792a8e0963cc92fddfa5a87706' (2024-06-01)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/d4555e80d80d2fa77f0a44201ca299f9602492a0' (2024-06-03)
  → 'github:Mic92/sops-nix/d071c74a7de1e26d211b69b6fbae37ae2e31a87f' (2024-06-10)
• Updated input 'sops-nix/nixpkgs-stable':
    'github:NixOS/nixpkgs/3b1b4895b2c5f9f5544d02132896aeb9ceea77bc' (2024-06-01)
  → 'github:NixOS/nixpkgs/4913a7c3d8b8d00cb9476a6bd730ff57777f740c' (2024-06-08)
2024-06-14 16:26:23 +02:00
.git-crypt Rotate git-crypt key 2024-01-31 01:39:35 +00:00
custom-utils Add port attrset 2023-11-22 14:55:28 +00:00
hosts Fix http 500 in home-assistant 2024-06-14 16:26:23 +02:00
modules Add mobile broadband 2024-06-14 16:26:23 +02:00
pkgs Fix typo 2024-06-14 16:26:22 +02:00
users Set scaling for internal display on host copper 2024-06-14 16:26:23 +02:00
.editorconfig Add config for .nix files 2022-04-27 11:02:38 +00:00
.envrc Use flakes 2021-11-17 09:33:48 +00:00
.gitattributes Add custom voicemail greeting 2023-11-22 14:55:29 +00:00
.gitignore Ignore qcow2 files (QEMU disk images) 2023-02-23 19:41:15 +00:00
.sops.yaml Rotate sops gpg key 2024-01-31 01:42:56 +00:00
flake.lock flake.lock: Update 2024-06-14 16:26:23 +02:00
flake.nix Add disko 2024-06-14 16:26:23 +02:00
justfile Add luks-pass command 2024-06-14 16:26:22 +02:00
README.md Add instructions to trust GPG key 2024-06-14 16:26:23 +02:00

home-manager

https://github.com/nix-community/home-manager

For a systematic overview of Home Manager and its available options, please see

Install a new host

This installs nixos on host somehost:

NixOS Anywhere

nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>

The traditional way

nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'

setting up sops

Get the host key and convert it.

ssh-keyscan -t ed25519 $host | ssh-to-age

Then add the key to .sops.yaml

If the key changed, you might want to run

sops updatekeys hosts/$host/secrets.yaml

nix repl

start an interactive environment for evaluating Nix expressions

$ nix repl

nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl

nix-repl> :lf .#

Import GPG public key

gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5