jalr/nixos-configuration
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
781 commits 20 branches 0 tags 3.1 MiB
Find a file
Jakob Lechner e287537c8b flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/bad376945de7033c7adc424c02054ea3736cf7c4' (2024-07-15)
  → 'github:nix-community/disko/0d510fe40b56ed74907a021d7e1ffd0042592914' (2024-08-12)
• Updated input 'gomod2nix':
    'github:nix-community/gomod2nix/31b6d2e40b36456e792cd6cf50d5a8ddd2fa59a1' (2024-05-30)
  → 'github:nix-community/gomod2nix/4e08ca09253ef996bd4c03afa383b23e35fe28a1' (2024-08-02)
• Updated input 'nix-pre-commit-hooks':
    'github:cachix/git-hooks.nix/f451c19376071a90d8c58ab1a953c6e9840527fd' (2024-07-15)
  → 'github:cachix/git-hooks.nix/c7012d0c18567c889b948781bc74a501e92275d1' (2024-08-09)
• Updated input 'nixos-hardware':
    'github:nixos/nixos-hardware/c5013aa7ce2c7ec90acee5d965d950c8348db751' (2024-07-11)
  → 'github:nixos/nixos-hardware/c54cf53e022b0b3c1d3b8207aa0f9b194c24f0cf' (2024-08-10)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/53e81e790209e41f0c1efa9ff26ff2fd7ab35e27' (2024-07-14)
  → 'github:nixos/nixpkgs/a731b45590a5169542990c36ffcde6cebd9a3356' (2024-08-11)
• Updated input 'nixpkgsMaster':
    'github:NixOS/nixpkgs/3f7fcbb2f91ec01dfb2574567d668494a56304e7' (2024-07-17)
  → 'github:NixOS/nixpkgs/0972c7d0124cc865be8803af49b979e5d44fc577' (2024-08-13)
• Updated input 'nur':
    'github:nix-community/NUR/f33f46c1e38b07b20a978ac39208058ab9ddedb1' (2024-07-17)
  → 'github:nix-community/NUR/20b1fc4032363116a880dc64e3fa96f8a24d4e64' (2024-08-13)
• Updated input 'poetry2nix':
    'github:nix-community/poetry2nix/d11c01e58587e5f21037ed6477465a7f26a32e27' (2024-07-15)
  → 'github:nix-community/poetry2nix/ed52f844c4dd04dde45550c3189529854384124e' (2024-08-13)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/0703ba03fd9c1665f8ab68cc3487302475164617' (2024-07-14)
  → 'github:Mic92/sops-nix/be0eec2d27563590194a9206f551a6f73d52fa34' (2024-08-12)
• Updated input 'sops-nix/nixpkgs-stable':
    'github:NixOS/nixpkgs/74348da2f3a312ee25cea09b98cdba4cb9fa5d5d' (2024-07-14)
  → 'github:NixOS/nixpkgs/556533a23879fc7e5f98dd2e0b31a6911a213171' (2024-07-21)
2024-08-13 14:46:13 +02:00
.git-crypt Rotate git-crypt key 2024-01-31 01:39:35 +00:00
custom-utils Add port attrset 2023-11-22 14:55:28 +00:00
hosts Update unifi controller to version 8 2024-08-08 16:51:42 +02:00
modules Implement connection rate limiting 2024-07-17 23:17:21 +02:00
pkgs Update VESC and fix adding firmware 2024-07-07 15:26:49 +02:00
users Set Git identity per directory 2024-08-13 14:46:13 +02:00
.editorconfig Add config for .nix files 2022-04-27 11:02:38 +00:00
.envrc Use flakes 2021-11-17 09:33:48 +00:00
.gitattributes Add custom voicemail greeting 2023-11-22 14:55:29 +00:00
.gitignore Ignore qcow2 files (QEMU disk images) 2023-02-23 19:41:15 +00:00
.sops.yaml Rotate sops gpg key 2024-01-31 01:42:56 +00:00
flake.lock flake.lock: Update 2024-08-13 14:46:13 +02:00
flake.nix Implement secure boot on copper 2024-07-03 01:54:17 +02:00
justfile Add overlay to REPL 2024-06-14 16:26:23 +02:00
README.md Add instructions to trust GPG key 2024-06-14 16:26:23 +02:00

README.md

home-manager

https://github.com/nix-community/home-manager

For a systematic overview of Home Manager and its available options, please see

Install a new host

This installs nixos on host somehost:

NixOS Anywhere

nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>

The traditional way

nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'

setting up sops

Get the host key and convert it.

ssh-keyscan -t ed25519 $host | ssh-to-age

Then add the key to .sops.yaml

If the key changed, you might want to run

sops updatekeys hosts/$host/secrets.yaml

nix repl

start an interactive environment for evaluating Nix expressions

$ nix repl

nix-repl> a=builtins.getFlake (toString ./.)

$ nix repl

nix-repl> :lf .#

Import GPG public key

gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5