No description
Flake lock file updates:
• Updated input 'nix-pre-commit-hooks':
'github:cachix/pre-commit-hooks.nix/cb770e93516a1609652fa8e945a0f310e98f10c0' (2023-09-24)
→ 'github:cachix/pre-commit-hooks.nix/033453f85064ccac434dfd957f95d8457901ecd6' (2023-10-01)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/261abe8a44a7e8392598d038d2e01f7b33cf26d0' (2023-09-24)
→ 'github:nixos/nixpkgs/3b79cc4bcd9c09b5aa68ea1957c25e437dc6bc58' (2023-10-03)
• Updated input 'nixpkgsMaster':
'github:NixOS/nixpkgs/ce860f6a1e0989d041556c45832b0b370a3d59a3' (2023-09-27)
→ 'github:NixOS/nixpkgs/e0b78ab95b4b23fa4395ff7a93ccff3a14353616' (2023-10-04)
• Updated input 'nur':
'github:nix-community/NUR/e73b0b963720fa2de9d11dc7ea6ab30d8d5163fd' (2023-09-27)
→ 'github:nix-community/NUR/4ca4be389a0c04cf9b41a554f9d3b3cea7a5b68a' (2023-10-04)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/2f375ed8702b0d8ee2430885059d5e7975e38f78' (2023-09-21)
→ 'github:Mic92/sops-nix/746c7fa1a64c1671a4bf287737c27fdc7101c4c2' (2023-10-03)
• Updated input 'sops-nix/nixpkgs-stable':
'github:NixOS/nixpkgs/596611941a74be176b98aeba9328aa9d01b8b322' (2023-09-16)
→ 'github:NixOS/nixpkgs/dbe90e63a36762f1fbde546e26a84af774a32455' (2023-10-01)
|
||
|---|---|---|
| .git-crypt | ||
| home-manager | ||
| hosts | ||
| modules | ||
| pkgs | ||
| .editorconfig | ||
| .envrc | ||
| .gitattributes | ||
| .gitignore | ||
| .sops.yaml | ||
| flake.lock | ||
| flake.nix | ||
| justfile | ||
| README.md | ||
home-manager
https://github.com/nix-community/home-manager
For a systematic overview of Home Manager and its available options, please see
- the Home Manager manual and
- the Home Manager configuration options.
Install a new host
This installs nixos on host somehost:
nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'
setting up sops
Get the host key and convert it.
ssh-keyscan -t ed25519 $host | ssh-to-age
Then add the key to .sops.yaml
If the key changed, you might want to run
sops updatekeys hosts/$host/secrets.yaml
nix repl
start an interactive environment for evaluating Nix expressions
$ nix repl
nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl
nix-repl> :lf .#
Import GPG public key
gpg --card-edit
gpg/card> fetch