mirror of
https://github.com/ellmau/nixos.git
synced 2025-12-19 09:29:36 +01:00
Stefan Ellmauthaler
5df252cae4
Flake lock file updates:
• Updated input 'comma':
'github:nix-community/comma/27ce74dda284f57ad17daf3d17ffda2bd67e4b0a' (2025-07-13)
→ 'github:nix-community/comma/0ba771882bb07a769c04de4e2a9209e811eabab9' (2025-09-29)
• Updated input 'comma/naersk':
'github:nix-community/naersk/0473954e399eec0081ee816f3430c17d1f7e5a42' (2025-07-07)
→ 'github:nix-community/naersk/0e72363d0938b0208d6c646d10649164c43f4d64' (2025-07-16)
• Added input 'comma/naersk/fenix':
'github:nix-community/fenix/bf0d6f70f4c9a9cf8845f992105652173f4b617f' (2025-07-14)
• Added input 'comma/naersk/fenix/nixpkgs':
follows 'comma/naersk/nixpkgs'
• Added input 'comma/naersk/fenix/rust-analyzer-src':
'github:rust-lang/rust-analyzer/591e3b7624be97e4443ea7b5542c191311aa141d' (2025-07-13)
• Updated input 'emacs-overlay':
'github:nix-community/emacs-overlay/ec568d50f0c82751c60c99efa282f1392d515ab4' (2025-07-18)
→ 'github:nix-community/emacs-overlay/d25fc7e60a935d562b5b0dac8c79554a5eed9d67' (2025-10-22)
• Updated input 'emacs-overlay/nixpkgs-stable':
'github:NixOS/nixpkgs/50ab793786d9de88ee30ec4e4c24fb4236fc2674' (2025-06-30)
→ 'github:NixOS/nixpkgs/33c6dca0c0cb31d6addcd34e90a63ad61826b28c' (2025-10-19)
• Updated input 'home-manager':
'github:nix-community/home-manager/c718918222bdb104397762dea67e6b397a7927fe' (2025-07-17)
→ 'github:nix-community/home-manager/3b955f5f0a942f9f60cdc9cacb7844335d0f21c3' (2025-09-21)
• Updated input 'lix-module':
'8b1094356f.tar.gz?narHash=sha256-SXUAlxpjPRkArRMHy5%2BHdi%2BPiC%2BND9yzzIjiaHmTvQU%3D&rev=8b1094356f4723d6e89d3f8a95b333ee16d9ab02' (2025-06-29)
→ 'd329212503.tar.gz?narHash=sha256-6a%2BPWILmqHCs9B5eIBLg6HSZ8jYweZpgOWO8FlyVwYI%3D&rev=d3292125035b04df00d01549a26e948631fabe1e' (2025-08-25)
• Updated input 'lix-module/lix':
'1d7368585e.tar.gz?narHash=sha256-J4ycLoXHPsoBoQtEXFCelL4xlq5pT8U9tNWNKm43%2BYI%3D&rev=1d7368585eebaa2c4bdbcb88fe600cfb2239b2c6' (2025-06-29)
→ '1a4393d0aa.tar.gz?narHash=sha256-jLCEW0FvjFhC%2Bc4RHzH%2BxbkSOxrnpFHnhjOw6sudhx0%3D&rev=1a4393d0aac31aba21f5737ede1b171e11336d77' (2025-07-23)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/d1bfa8f6ccfb5c383e1eba609c1eb67ca24ed153' (2025-07-16)
→ 'github:NixOS/nixos-hardware/d6645c340ef7d821602fd2cd199e8d1eed10afbc' (2025-10-20)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/32a4e87942101f1c9f9865e04dc3ddb175f5f32e' (2025-07-15)
→ 'github:NixOS/nixpkgs/481cf557888e05d3128a76f14c76397b7d7cc869' (2025-10-21)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/6e987485eb2c77e5dcc5af4e3c70843711ef9251' (2025-07-16)
→ 'github:NixOS/nixpkgs/5e2a59a5b1a82f89f2c7e598302a9cacebb72a67' (2025-10-19)
• Updated input 'simple-nixos-mailserver':
'gitlab:simple-nixos-mailserver/nixos-mailserver/53007af63fade28853408370c4c600a63dd97f41' (2025-05-23)
→ 'gitlab:simple-nixos-mailserver/nixos-mailserver/f5936247dbdb8501221978562ab0b302dd75456c' (2025-08-13)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/2c8def626f54708a9c38a5861866660395bb3461' (2025-07-15)
→ 'github:Mic92/sops-nix/5a7d18b5c55642df5c432aadb757140edfeb70b3' (2025-10-20)
Nix-configuration
Deploy on a new machine
- setup the filesystem as you see fit
- check out repository to
/mnt/etc/nixos - run
nixos-generate-config --root /mntin/mnt/etc/nixos - create
machines/<machine-name>/default.nixand configure the machine - move
hardware-configuration.nixtomachines/<machine-name>/hardware-configuration.nix - stage the machine-folder
- run
nix-install --no-root-passwd --flake .#hostname --option experimental-features "nix-command flakes"
nix-sops
- generate on your (sshd-enabled) machine a pgp key:
nix shell nixpkgs#ssh-to-pgpsudo ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key > /etc/nixos/secrets/keys/hosts/<hostname>.asc
- add the fingerprint of the new key to the
/etc/nixos/.sops.yamlfile - Rekey the secrets with either
- a master key
- or after a git push on another machine with enough permissions to rekey
- the flakes dev-shell (
nix develop) allows to usesops <sops-file>as well assops-rekey <sops-file>to manage the keys on the system