No description
Find a file
Jakob Lechner e7860f8f92 flake.lock: Update
Flake lock file updates:

• Updated input 'nix-pre-commit-hooks':
    'github:cachix/git-hooks.nix/b084b2c2b6bc23e83bbfe583b03664eb0b18c411?narHash=sha256-tJ7A8mID3ct69n9WCvZ3PzIIl3rXTdptn/lZmqSS95U%3D' (2025-09-11)
  → 'github:cachix/git-hooks.nix/54df955a695a84cd47d4a43e08e1feaf90b1fd9b?narHash=sha256-ytw7ROXaWZ7OfwHrQ9xvjpUWeGVm86pwnEd1QhzawIo%3D' (2025-09-17)
• Updated input 'nixos-hardware':
    'github:nixos/nixos-hardware/4c38a024fa32e61db2be8573e5282b15d9733a79?narHash=sha256-NfiTk59huy/YK9H4W4wVwRYyiP2u86QqROM5KK4f5F4%3D' (2025-09-14)
  → 'github:nixos/nixos-hardware/67a709cfe5d0643dafd798b0b613ed579de8be05?narHash=sha256-w6cDExPBqbq7fTLo4dZ1ozDGeq3yV6dSN4n/sAaS6OM%3D' (2025-09-15)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/9a094440e02a699be5c57453a092a8baf569bdad?narHash=sha256-Vp9K5ol6h0J90jG7Rm4RWZsCB3x7v5VPx588TQ1dkfs%3D' (2025-09-14)
  → 'github:nixos/nixpkgs/e9b7f2ff62b35f711568b1f0866243c7c302028d?narHash=sha256-uLwwHFCZnT1c3N3biVe/0hCkag2GSrf9%2BM56%2BOkf%2BWY%3D' (2025-09-17)
• Updated input 'nixpkgsMaster':
    'github:NixOS/nixpkgs/434ed09bd161bb1058612038479dc34863c3f106?narHash=sha256-D44RIPMw71krFXsk9af22YbwBhHpLWCDbncFokHWs5c%3D' (2025-09-15)
  → 'github:NixOS/nixpkgs/24d7757b06ccd2ab95ad9661e8461f1a84c29f88?narHash=sha256-%2BZA/6rNgzgn8U05eexkdme2eTDbW5MpRTrqpg2Sc2cE%3D' (2025-09-17)
• Updated input 'nur':
    'github:nix-community/NUR/0f5e4ecbdfd50a2deb75f344a03e5cfa22b97bcb?narHash=sha256-hYGtHXTQ6eQPZWXKGxZWNrraP0j2p69B9EFIKNRC65E%3D' (2025-09-15)
  → 'github:nix-community/NUR/32b846c44f3af23fe35a5169e072764ee9116eb8?narHash=sha256-8OL31Mu6nHWJbzNar/1SQcUcil7lU0o7r3dGycydKr8%3D' (2025-09-17)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/ee6f91c1c11acf7957d94a130de77561ec24b8ab?narHash=sha256-TumOaykhZO8SOs/faz6GQhqkOcFLoQvESLSF1cJ4mZc%3D' (2025-09-14)
  → 'github:Mic92/sops-nix/f77d4cfa075c3de66fc9976b80e0c4fc69e2c139?narHash=sha256-HYnwlbY6RE5xVd5rh0bYw77pnD8lOgbT4mlrfjgNZ0c%3D' (2025-09-16)
2025-09-17 21:42:24 +02:00
.git-crypt Rotate git-crypt key 2024-01-31 01:39:35 +00:00
custom-utils Fix duplicate port check 2025-04-16 22:54:29 +02:00
hosts Replace ddclient with godns 2025-09-16 11:29:09 +02:00
modules Add udev module 2025-09-09 12:38:14 +02:00
nix-cache Add nix-cache 2025-09-03 22:17:28 +02:00
pkgs Add prometheus for home network 2025-09-15 18:14:24 +02:00
users Use vesc only on copper 2025-09-17 00:23:12 +02:00
.editorconfig Add config for .nix files 2022-04-27 11:02:38 +00:00
.envrc Use flakes 2021-11-17 09:33:48 +00:00
.gitattributes Add custom voicemail greeting 2023-11-22 14:55:29 +00:00
.gitignore Ignore qcow2 files (QEMU disk images) 2023-02-23 19:41:15 +00:00
.sops.yaml Reinstall magnesium 2025-04-09 10:27:38 +02:00
flake.lock flake.lock: Update 2025-09-17 21:42:24 +02:00
flake.nix Exclude .envrc from pre-commit checks 2025-09-03 21:37:31 +02:00
justfile Use file to unlock LUKS from usb media 2025-04-09 10:20:44 +02:00
README.md Add instructions how to build a system config 2025-01-11 19:24:15 +01:00

jalr's NixOS Configuration

Install a new host

This installs nixos on host somehost:

NixOS Anywhere

nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>

The traditional way

nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'

Build a configuration

nix build .#nixosConfigurations.iron.config.system.build.toplevel

setting up sops

Get the host key and convert it.

ssh-keyscan -t ed25519 $host | ssh-to-age

Then add the key to .sops.yaml

If the key changed, you might want to run

sops updatekeys hosts/$host/secrets.yaml

nix repl

start an interactive environment for evaluating Nix expressions

$ nix repl

nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl

nix-repl> :lf .#

Import GPG public key

gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5

Debugging boot issues

  1. Add rd.systemd.debug_shell kernel parameter
  2. Press CTRL+ALT+F9 to switch to root shell