No description
Find a file
Jakob Lechner d677595ed8 flake.lock: Update
Flake lock file updates:

• Updated input 'home-manager':
    'github:nix-community/home-manager/b4e98224ad1336751a2ac7493967a4c9f6d9cb3f?narHash=sha256-t7dFCDl4vIOOUMhEZnJF15aAzkpaup9x4ZRGToDFYWI%3D' (2025-04-08)
  → 'github:nix-community/home-manager/c61bfe3ae692f42ce688b5865fac9e0de58e1387?narHash=sha256-iyn/WBYDc7OtjSawbegINDe/gIkok888kQxk3aVnkgg%3D' (2025-04-15)
• Updated input 'nixpkgsMaster':
    'github:NixOS/nixpkgs/58703017d8a85361b67f02d7efbb8baf02bc1333?narHash=sha256-Np5pgX4m4h7IaCP1BwQPMz2p7XIRvjSfhaO1/IdgyIQ%3D' (2025-04-14)
  → 'github:NixOS/nixpkgs/71329e03df9c14ac27774c68536b6b7418a59a9b?narHash=sha256-7vC7GLa4JSL/%2BYtHcQ%2B06c%2BJBctWFSB51YyqUM0l50c%3D' (2025-04-17)
• Updated input 'nur':
    'github:nix-community/NUR/91cf72548fc06e8effab92add042cb256b0a5ffa?narHash=sha256-kgJIH0MIyPShPmuCK7jmTL4MHJ14j/xU9ITbm5HaDUw%3D' (2025-04-14)
  → 'github:nix-community/NUR/74f1b9f96f695deab80d45e6a9859f980b072436?narHash=sha256-KzHhtTA54EwiOgxh3Vy81JhoIiQgZRDZlgo85a6K9TE%3D' (2025-04-17)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/7e147a1ae90f0d4a374938cdc3df3cdaecb9d388?narHash=sha256-lv52pnfiRGp5%2BxkZEgWr56DWiRgkMFXpiGba3eJ3krE%3D' (2025-04-13)
  → 'github:Mic92/sops-nix/61154300d945f0b147b30d24ddcafa159148026a?narHash=sha256-pXyanHLUzLNd3MX9vsWG%2B6Z2hTU8niyphWstYEP3/GU%3D' (2025-04-14)
2025-04-17 21:32:06 +02:00
.git-crypt Rotate git-crypt key 2024-01-31 01:39:35 +00:00
custom-utils Fix duplicate port check 2025-04-16 22:54:29 +02:00
hosts Add photoprism 2025-04-17 15:43:58 +02:00
modules Use postgresql as database 2025-04-16 22:54:29 +02:00
pkgs Remove unused code 2025-04-16 22:54:28 +02:00
users Fix browserpass 2025-04-16 22:54:29 +02:00
.editorconfig Add config for .nix files 2022-04-27 11:02:38 +00:00
.envrc Use flakes 2021-11-17 09:33:48 +00:00
.gitattributes Add custom voicemail greeting 2023-11-22 14:55:29 +00:00
.gitignore Ignore qcow2 files (QEMU disk images) 2023-02-23 19:41:15 +00:00
.sops.yaml Reinstall magnesium 2025-04-09 10:27:38 +02:00
flake.lock flake.lock: Update 2025-04-17 21:32:06 +02:00
flake.nix Use nixos-24.11 branch of nixpkgs 2025-04-16 22:54:29 +02:00
justfile Use file to unlock LUKS from usb media 2025-04-09 10:20:44 +02:00
README.md Add instructions how to build a system config 2025-01-11 19:24:15 +01:00

jalr's NixOS Configuration

Install a new host

This installs nixos on host somehost:

NixOS Anywhere

nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>

The traditional way

nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'

Build a configuration

nix build .#nixosConfigurations.iron.config.system.build.toplevel

setting up sops

Get the host key and convert it.

ssh-keyscan -t ed25519 $host | ssh-to-age

Then add the key to .sops.yaml

If the key changed, you might want to run

sops updatekeys hosts/$host/secrets.yaml

nix repl

start an interactive environment for evaluating Nix expressions

$ nix repl

nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl

nix-repl> :lf .#

Import GPG public key

gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5

Debugging boot issues

  1. Add rd.systemd.debug_shell kernel parameter
  2. Press CTRL+ALT+F9 to switch to root shell