No description
Flake lock file updates:
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/bd1cde45c77891214131cbbea5b1203e485a9d51' (2023-10-11)
→ 'github:nixos/nixpkgs/898cb2064b6e98b8c5499f37e81adbdf2925f7c5' (2023-10-13)
• Updated input 'nixpkgsMaster':
'github:NixOS/nixpkgs/a97d85ff06c5d91b594cace882fdf1b241086345' (2023-10-13)
→ 'github:NixOS/nixpkgs/fb8d36459a4310d51471461123aa7798c15b7dde' (2023-10-16)
• Updated input 'nur':
'github:nix-community/NUR/1076bf182a065b1a037caaaa9edee751148582e3' (2023-10-13)
→ 'github:nix-community/NUR/72bd87326ff38e5c8e76d73681af56b8255ddace' (2023-10-16)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/f995ea159252a53b25fa99824f2891e3b479d511' (2023-10-11)
→ 'github:Mic92/sops-nix/51186b8012068c417dac7c31fb12861726577898' (2023-10-15)
• Updated input 'sops-nix/nixpkgs-stable':
'github:NixOS/nixpkgs/2f3b6b3fcd9fa0a4e6b544180c058a70890a7cc1' (2023-10-07)
→ 'github:NixOS/nixpkgs/0e1cff585c1a85aeab059d3109f66134a8f76935' (2023-10-15)
|
||
|---|---|---|
| .git-crypt | ||
| home-manager | ||
| hosts | ||
| modules | ||
| pkgs | ||
| .editorconfig | ||
| .envrc | ||
| .gitattributes | ||
| .gitignore | ||
| .sops.yaml | ||
| flake.lock | ||
| flake.nix | ||
| justfile | ||
| README.md | ||
home-manager
https://github.com/nix-community/home-manager
For a systematic overview of Home Manager and its available options, please see
- the Home Manager manual and
- the Home Manager configuration options.
Install a new host
This installs nixos on host somehost:
nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'
setting up sops
Get the host key and convert it.
ssh-keyscan -t ed25519 $host | ssh-to-age
Then add the key to .sops.yaml
If the key changed, you might want to run
sops updatekeys hosts/$host/secrets.yaml
nix repl
start an interactive environment for evaluating Nix expressions
$ nix repl
nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl
nix-repl> :lf .#
Import GPG public key
gpg --card-edit
gpg/card> fetch