No description
Flake lock file updates:
• Updated input 'nix-pre-commit-hooks':
'github:cachix/pre-commit-hooks.nix/1fa438eee82f35bdd4bc30a9aacd7648d757b388' (2023-06-26)
→ 'github:cachix/pre-commit-hooks.nix/522fd47af79b66cdd04b92618e65c7a11504650a' (2023-06-30)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/9790f3242da2152d5aa1976e3e4b8b414f4dd206' (2023-06-27)
→ 'github:nixos/nixpkgs/0de86059128947b2438995450f2c2ca08cc783d5' (2023-07-01)
• Updated input 'nixpkgsMaster':
'github:NixOS/nixpkgs/3adc3587e8e8ecbe90153e7ad4e7b3b60b592289' (2023-06-28)
→ 'github:NixOS/nixpkgs/4563446e28ccdfdae3b437390ce11081a7493bca' (2023-07-03)
• Updated input 'nur':
'github:nix-community/NUR/918bb7de96bc60ef2df1c444a25f6b94a4fb8e45' (2023-06-28)
→ 'github:nix-community/NUR/1fec0607786d389341c0a9e565673b5af595ff6a' (2023-07-03)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/2ff6973350682f8d16371f8c071a304b8067f192' (2023-06-22)
→ 'github:Mic92/sops-nix/5ed3c22c1fa0515e037e36956a67fe7e32c92957' (2023-07-02)
• Updated input 'sops-nix/nixpkgs-stable':
'github:NixOS/nixpkgs/e2e2059d19668dab1744301b8b0e821e3aae9c99' (2023-06-17)
→ 'github:NixOS/nixpkgs/f553c016a31277246f8d3724d3b1eee5e8c0842c' (2023-07-02)
|
||
|---|---|---|
| .git-crypt | ||
| home-manager | ||
| hosts | ||
| modules | ||
| pkgs | ||
| .editorconfig | ||
| .envrc | ||
| .gitattributes | ||
| .gitignore | ||
| .sops.yaml | ||
| flake.lock | ||
| flake.nix | ||
| justfile | ||
| README.md | ||
home-manager
https://github.com/nix-community/home-manager
For a systematic overview of Home Manager and its available options, please see
- the Home Manager manual and
- the Home Manager configuration options.
Install a new host
This installs nixos on host somehost:
nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'
setting up sops
Get the host key and convert it.
ssh-keyscan -t ed25519 $host | ssh-to-age
Then add the key to .sops.yaml
If the key changed, you might want to run
sops updatekeys hosts/$host/secrets.yaml
nix repl
start an interactive environment for evaluating Nix expressions
$ nix repl
nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl
nix-repl> :lf .#
Import GPG public key
gpg --card-edit
gpg/card> fetch