No description
Find a file
Jakob Lechner afa1e5a46b flake.lock: Update
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/c5140c6079ff690e85eac0b86e254de16a79a4b7?narHash=sha256-mi6cAjuBztm9gFfpiVo6mAn81cCID6nmDXh5Kmyjwyc%3D' (2025-04-23)
  → 'github:nix-community/disko/ca27b88c88948d96feeee9ed814cbd34f53d0d70?narHash=sha256-LqhRwzvIVPEjH0TaPgwzqpyhW6DtCrvz7FnUJDoUZh8%3D' (2025-04-24)
• Updated input 'home-manager':
    'github:nix-community/home-manager/c61bfe3ae692f42ce688b5865fac9e0de58e1387?narHash=sha256-iyn/WBYDc7OtjSawbegINDe/gIkok888kQxk3aVnkgg%3D' (2025-04-15)
  → 'github:nix-community/home-manager/dd26f75fb4ec1c731d4b1396eaf4439ce40a91c1?narHash=sha256-eqSo9ugzsqhFgaDFYUZj943nurlX4L6f%2BAW0skJ4W%2BM%3D' (2025-04-25)
• Updated input 'nixos-hardware':
    'github:nixos/nixos-hardware/8bf8a2a0822365bd8f44fd1a19d7ed0a1d629d64?narHash=sha256-xmqG4MZArM1JNxPJ33s0MtuBzgnaCO9laARoU3AfP8E%3D' (2025-04-23)
  → 'github:nixos/nixos-hardware/f7bee55a5e551bd8e7b5b82c9bc559bc50d868d1?narHash=sha256-bUGjvaPVsOfQeTz9/rLTNLDyqbzhl0CQtJJlhFPhIYw%3D' (2025-04-24)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/9684b53175fc6c09581e94cc85f05ab77464c7e3?narHash=sha256-AQ7M9wTa/Pa/kK5pcGTgX/DGqMHyzsyINfN7ktsI7Fo%3D' (2025-04-21)
  → 'github:nixos/nixpkgs/5630cf13cceac06cefe9fc607e8dfa8fb342dde3?narHash=sha256-FQoi3R0NjQeBAsEOo49b5tbDPcJSMWc3QhhaIi9eddw%3D' (2025-04-24)
• Updated input 'nixpkgsMaster':
    'github:NixOS/nixpkgs/6c679116a4260de3d0a0add76ca844df5a6afde8?narHash=sha256-CiNSRcFcqmGzFil6VBGW9W7m7q2FzJyF9x9a7452iVE%3D' (2025-04-23)
  → 'github:NixOS/nixpkgs/e36d0d43122a2b8bb04a2f5322978db8d8ddedd2?narHash=sha256-jR0am4wDBXODhhJ2%2BSrsHZSs3loSYWZqEBE%2Btl0PA4Q%3D' (2025-04-26)
• Updated input 'nur':
    'github:nix-community/NUR/6d04ab16a01981326374c50442471130f212c810?narHash=sha256-09%2BKxS%2B8Lxo5E7yi3KfHFT/w6JR9gq6p%2BFr%2BXd%2BarKo%3D' (2025-04-23)
  → 'github:nix-community/NUR/34c80a75bf09085cfd04a476389a4162c6154d42?narHash=sha256-%2B3HDClco9BTgWovVMODc0e8Gh3%2BLNTt1EXZW2tJaXjA%3D' (2025-04-26)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/c11863f1e964833214b767f4a369c6e6a7aba141?narHash=sha256-GfpyMzxwkfgRVN0cTGQSkTC0OHhEkv3Jf6Tcjm//qZ0%3D' (2025-04-21)
  → 'github:nixos/nixpkgs/f771eb401a46846c1aebd20552521b233dd7e18b?narHash=sha256-ITSpPDwvLBZBnPRS2bUcHY3gZSwis/uTe255QgMtTLA%3D' (2025-04-24)
2025-04-26 17:24:47 +02:00
.git-crypt Rotate git-crypt key 2024-01-31 01:39:35 +00:00
custom-utils Fix duplicate port check 2025-04-16 22:54:29 +02:00
hosts Add tandoor 2025-04-18 02:01:27 +02:00
modules Use postgresql as database 2025-04-16 22:54:29 +02:00
pkgs Remove unused code 2025-04-16 22:54:28 +02:00
users Improve DND widget 2025-04-22 18:32:25 +02:00
.editorconfig Add config for .nix files 2022-04-27 11:02:38 +00:00
.envrc Use flakes 2021-11-17 09:33:48 +00:00
.gitattributes Add custom voicemail greeting 2023-11-22 14:55:29 +00:00
.gitignore Ignore qcow2 files (QEMU disk images) 2023-02-23 19:41:15 +00:00
.sops.yaml Reinstall magnesium 2025-04-09 10:27:38 +02:00
flake.lock flake.lock: Update 2025-04-26 17:24:47 +02:00
flake.nix Use nixos-24.11 branch of nixpkgs 2025-04-16 22:54:29 +02:00
justfile Use file to unlock LUKS from usb media 2025-04-09 10:20:44 +02:00
README.md Add instructions how to build a system config 2025-01-11 19:24:15 +01:00

jalr's NixOS Configuration

Install a new host

This installs nixos on host somehost:

NixOS Anywhere

nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>

The traditional way

nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'

Build a configuration

nix build .#nixosConfigurations.iron.config.system.build.toplevel

setting up sops

Get the host key and convert it.

ssh-keyscan -t ed25519 $host | ssh-to-age

Then add the key to .sops.yaml

If the key changed, you might want to run

sops updatekeys hosts/$host/secrets.yaml

nix repl

start an interactive environment for evaluating Nix expressions

$ nix repl

nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl

nix-repl> :lf .#

Import GPG public key

gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5

Debugging boot issues

  1. Add rd.systemd.debug_shell kernel parameter
  2. Press CTRL+ALT+F9 to switch to root shell