mirror of
https://github.com/ellmau/nixos.git
synced 2026-11-03 13:54:54 +01:00
Stefan Ellmauthaler
43a0a42334
Flake lock file updates:
• Updated input 'comma':
'github:nix-community/comma/0ba771882bb07a769c04de4e2a9209e811eabab9' (2025-09-29)
→ 'github:nix-community/comma/e73b22dc00d74adfed9ac534867caaa40563a065' (2026-09-25)
• Updated input 'comma/flake-compat':
'github:edolstra/flake-compat/9100a0f413b0c601e0533d1d94ffd501ce2e7885' (2025-05-12)
→ 'github:edolstra/flake-compat/5edf11c44bc78a0d334f6334cdaf7d60d732daab' (2025-12-29)
• Updated input 'comma/naersk':
'github:nix-community/naersk/0e72363d0938b0208d6c646d10649164c43f4d64' (2025-07-16)
→ 'github:nix-community/naersk/9aa07bb0256d300219b30622d2454e85f7f3667e' (2026-06-23)
• Updated input 'emacs-overlay':
'github:nix-community/emacs-overlay/d25fc7e60a935d562b5b0dac8c79554a5eed9d67' (2025-10-22)
→ 'github:nix-community/emacs-overlay/46e212732a78ac53e0b9792c457dee9e3a15fe91' (2026-10-23)
• Updated input 'emacs-overlay/nixpkgs-stable':
'github:NixOS/nixpkgs/33c6dca0c0cb31d6addcd34e90a63ad61826b28c' (2025-10-19)
→ 'github:NixOS/nixpkgs/da6dc0e7b26060f2f71ce3ef7088fb56ee44fa36' (2026-10-21)
• Updated input 'flake-utils-plus':
'github:gytis-ivaskevicius/flake-utils-plus/afcb15b845e74ac5e998358709b2b5fe42a948d1' (2025-02-03)
→ 'github:gytis-ivaskevicius/flake-utils-plus/a00f6f51907b5c74d2fde086b10b19d446d15717' (2026-05-23)
• Updated input 'glpi-inventory':
'github:mmarx/glpi-inventory/23c74136a320804c3f737219cf3522b3ebb4b4cf' (2025-05-26)
→ 'github:mmarx/glpi-inventory/24b5ced6766fa6d712cb5b07c3a7fd580745a850' (2026-05-28)
• Added input 'glpi-inventory/dried-nix-flakes':
'github:cyberus-technology/dried-nix-flakes/1b2ba62710c6c1d9eba0e8e3adc029cc2e9291a4' (2025-08-25)
• Removed input 'glpi-inventory/utils'
• Updated input 'home-manager':
'github:nix-community/home-manager/3b955f5f0a942f9f60cdc9cacb7844335d0f21c3' (2025-09-21)
→ 'github:nix-community/home-manager/44831a7eaba4360fb81f2acc5ea6de5fde90aaa3' (2025-11-24)
• Updated input 'lix-module':
'd329212503.tar.gz?narHash=sha256-6a%2BPWILmqHCs9B5eIBLg6HSZ8jYweZpgOWO8FlyVwYI%3D&rev=d3292125035b04df00d01549a26e948631fabe1e' (2025-08-25)
→ '573e44683c.tar.gz?narHash=sha256-fWYOWhACIzdj8YC4pG9yjaH1B4kjKT/RdH7lxwTr9MQ%3D&rev=573e44683c02018534d1d9c281518d62db9efa67' (2026-05-07)
• Updated input 'lix-module/lix':
'1a4393d0aa.tar.gz?narHash=sha256-jLCEW0FvjFhC%2Bc4RHzH%2BxbkSOxrnpFHnhjOw6sudhx0%3D&rev=1a4393d0aac31aba21f5737ede1b171e11336d77' (2025-07-23)
→ 'c2dbb0f5bf.tar.gz?narHash=sha256-H94I3Z9PgI0utJ56Ma%2BDLNPNjVyKfIrOBLYDQkw%2BzUU%3D&rev=c2dbb0f5bfffa2562ae9f84040e5bb3503c6b011' (2026-05-04)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/d6645c340ef7d821602fd2cd199e8d1eed10afbc' (2025-10-20)
→ 'github:NixOS/nixos-hardware/1b418b8f203e49a92f250f8babdd19af1b6f7a7f' (2026-10-22)
• Added input 'nixos-hardware/nixpkgs':
'https://releases.nixos.org/nixos/unstable/nixos-26.11pre1074753.b1b875982b17/nixexprs.tar.xz?narHash=sha256-vWkSk5bbfTqdtMoSgD9FshACO8JCvXTFi%2B3cqEp0mH0%3D' (2026-09-16)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/481cf557888e05d3128a76f14c76397b7d7cc869' (2025-10-21)
→ 'github:NixOS/nixpkgs/ac62194c3917d5f474c1a844b6fd6da2db95077d' (2026-01-02)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/5e2a59a5b1a82f89f2c7e598302a9cacebb72a67' (2025-10-19)
→ 'github:NixOS/nixpkgs/02c087f3fe673c9e317f206a627cb6b910336dbe' (2026-10-20)
• Updated input 'simple-nixos-mailserver':
'gitlab:simple-nixos-mailserver/nixos-mailserver/f5936247dbdb8501221978562ab0b302dd75456c' (2025-08-13)
→ 'gitlab:simple-nixos-mailserver/nixos-mailserver/5b38fb599f50e9d78325d1d2706e36303c166047' (2025-11-16)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/5a7d18b5c55642df5c432aadb757140edfeb70b3' (2025-10-20)
→ 'github:Mic92/sops-nix/e80b8b733d8452a751a25d0063abc9683b6c8185' (2026-10-22)
Nix-configuration
Deploy on a new machine
- setup the filesystem as you see fit
- check out repository to
/mnt/etc/nixos - run
nixos-generate-config --root /mntin/mnt/etc/nixos - create
machines/<machine-name>/default.nixand configure the machine - move
hardware-configuration.nixtomachines/<machine-name>/hardware-configuration.nix - stage the machine-folder
- run
nix-install --no-root-passwd --flake .#hostname --option experimental-features "nix-command flakes"
nix-sops
- generate on your (sshd-enabled) machine a pgp key:
nix shell nixpkgs#ssh-to-pgpsudo ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key > /etc/nixos/secrets/keys/hosts/<hostname>.asc
- add the fingerprint of the new key to the
/etc/nixos/.sops.yamlfile - Rekey the secrets with either
- a master key
- or after a git push on another machine with enough permissions to rekey
- the flakes dev-shell (
nix develop) allows to usesops <sops-file>as well assops-rekey <sops-file>to manage the keys on the system