ellmau/nixos
1
0
Fork 0
mirror of https://github.com/ellmau/nixos.git synced 2025-12-19 09:29:36 +01:00
Code Issues Projects Releases Wiki Activity
508 Commits 9 Branches 0 Tags
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Stefan Ellmauthaler 4ace280255
flake.lock: Update 
Flake lock file updates:

• Updated input 'comma':
    'github:nix-community/comma/4c06de761a390f57fdf98fb0461e3089ec5c1a8a' (2023-09-11)
  → 'github:nix-community/comma/5ecd5024b4e490a0a69628c5ae96506f141551c0' (2023-10-27)
• Updated input 'comma/flake-compat':
    'github:edolstra/flake-compat/35bb57c0c8d8b62bbfd284272c928ceb64ddbde9' (2023-01-17)
  → 'github:edolstra/flake-compat/0f9255e01c2351cc7d116c072cb317785dd33b33' (2023-10-04)
• Updated input 'comma/naersk':
    'github:nix-community/naersk/abca1fb7a6cfdd355231fc220c3d0302dbb4369a' (2023-07-05)
  → 'github:nix-community/naersk/636a9b5dd7f2ad7d7c3af929ecf95e4d4fab9e97' (2023-10-18)
• Updated input 'emacs-overlay':
    'github:nix-community/emacs-overlay/7e236c963a46bc712971f9f6ff78f4ea50b64c0f' (2023-10-20)
  → 'github:nix-community/emacs-overlay/accc684eb6fceac1b504fc6bec7298263dae3f86' (2023-11-15)
• Updated input 'emacs-overlay/nixpkgs-stable':
    'github:NixOS/nixpkgs/80c1aab725151632ddc2a20caeb914e76dd0673c' (2023-10-18)
  → 'github:NixOS/nixpkgs/da4024d0ead5d7820f6bd15147d3fe2a0c0cec73' (2023-11-10)
• Updated input 'home-manager':
    'github:nix-community/home-manager/07682fff75d41f18327a871088d20af2710d4744' (2023-09-19)
  → 'github:nix-community/home-manager/04bac349d585c9df38d78e0285b780a140dc74a4' (2023-11-12)
• Updated input 'nixos-hardware':
    'github:NixOS/nixos-hardware/72d53d51704295f1645d20384cd13aecc182f624' (2023-10-19)
  → 'github:NixOS/nixos-hardware/5689f3ebf899f644a1aabe8774d4f37eb2f6c2f9' (2023-11-14)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/80c1aab725151632ddc2a20caeb914e76dd0673c' (2023-10-18)
  → 'github:NixOS/nixpkgs/da4024d0ead5d7820f6bd15147d3fe2a0c0cec73' (2023-11-10)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/ca012a02bf8327be9e488546faecae5e05d7d749' (2023-10-16)
  → 'github:NixOS/nixpkgs/e44462d6021bfe23dfb24b775cc7c390844f773d' (2023-11-12)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/51186b8012068c417dac7c31fb12861726577898' (2023-10-15)
  → 'github:Mic92/sops-nix/0e3a94167dcd10a47b89141f35b2ff9e04b34c46' (2023-11-14)
• Updated input 'sops-nix/nixpkgs-stable':
    'github:NixOS/nixpkgs/0e1cff585c1a85aeab059d3109f66134a8f76935' (2023-10-15)
  → 'github:NixOS/nixpkgs/9502d0245983bb233da8083b55d60d96fd3c29ff' (2023-11-12)
2023-11-15 11:08:33 +01:00
common
Update rhea pub key
2023-09-25 23:59:30 +02:00
lib
fix lib function and remove app to expose only the emacs package
2023-10-02 16:27:59 +02:00
machines
stel-xps into travel mode (dpi set)
2023-08-31 14:08:07 +02:00
modules
use unstable zoom
2023-10-09 12:24:23 +02:00
packages/emacs
Update self fetched packages for emacs
2023-10-04 15:54:01 +02:00
secrets
nix fmt
2023-06-01 14:57:02 +02:00
templates
nix fmt
2023-06-01 14:57:02 +02:00
users/ellmau
Add background image service (based on feh calls)
2023-08-14 15:29:26 +02:00
.dir-locals.el
Swayfy (#5)
2022-08-22 16:39:47 +02:00
.gitignore
Add .direnv in all subfolders to gitignore
2023-05-12 16:41:19 +02:00
.sops.yaml
Add stel-xps and nucturne to the wireguard network
2022-08-02 11:28:11 +02:00
default.nix
Swayfy (#5)
2022-08-22 16:39:47 +02:00
flake.lock
flake.lock: Update
2023-11-15 11:08:33 +01:00
flake.nix
Add darwin as supported system and fix emacs package
2023-10-02 16:27:59 +02:00
README.md
Add firewall and update readme
2022-07-19 10:50:37 +02:00

README.md

Nix-configuration

Deploy on a new machine

  • setup the filesystem as you see fit
  • check out repository to /mnt/etc/nixos
  • run nixos-generate-config --root /mnt in /mnt/etc/nixos
  • create machines/<machine-name>/default.nix and configure the machine
  • move hardware-configuration.nix to machines/<machine-name>/hardware-configuration.nix
  • stage the machine-folder
  • run
  • nix-install --no-root-passwd --flake .#hostname --option experimental-features "nix-command flakes"

nix-sops

  • generate on your (sshd-enabled) machine a pgp key:
    • nix shell nixpkgs#ssh-to-pgp
    • sudo ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key > /etc/nixos/secrets/keys/hosts/<hostname>.asc
  • add the fingerprint of the new key to the /etc/nixos/.sops.yaml file
  • Rekey the secrets with either
    • a master key
    • or after a git push on another machine with enough permissions to rekey
  • the flakes dev-shell (nix develop) allows to use sops <sops-file> as well as sops-rekey <sops-file> to manage the keys on the system
Description
No description provided
Readme 3.2 MiB
Languages
Nix 79.6%
Emacs Lisp 12.4%
Haskell 4.6%
CSS 3%
Shell 0.4%