mirror of https://github.com/ellmau/nixos.git synced 2025-12-19 09:29:36 +01:00

Go to file

Flake lock file updates:

• Updated input 'emacs-overlay':
    'github:nix-community/emacs-overlay/76b9c0cd881b1af278b955eb4d89a6a2d850de99' (2022-07-21)
  → 'github:nix-community/emacs-overlay/26386599653aa6040645f99a7446c47eefee05c4' (2022-07-25)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/26fe7618c7efbbfe28db9a52a21fb87e67ebaf06' (2022-07-20)
  → 'github:NixOS/nixpkgs/e3583ad6e533a9d8dd78f90bfa93812d390ea187' (2022-07-22)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/614a842b74b7a1497e8cfca7c61bec38f51911b3' (2022-07-20)
  → 'github:NixOS/nixpkgs/e494a908e8895b9cba18e21d5fc83362f64b3f6a' (2022-07-24)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/6efa719f8d02139ce41398b9e59e06888dc1305a' (2022-07-21)
  → 'github:Mic92/sops-nix/d7f8cf1b77ebe5f287884f17b1ee4cc4f48bad1d' (2022-07-24)
• Updated input 'sops-nix/nixpkgs-22_05':
    'github:NixOS/nixpkgs/4e329926df7ee5fa49929a83d31ee7d541f8b45c' (2022-07-17)
  → 'github:NixOS/nixpkgs/2e14bc76ab41c60ba57fd57ff52badaa29d349f5' (2022-07-24)

2022-07-25 09:51:44 +02:00

common

Rename wg net for more distinctness

2022-07-21 17:43:43 +02:00

lib

Fix stateversions, update lib

2022-06-14 14:31:57 +02:00

machines

Add network functionality

2022-07-19 14:07:07 +02:00

modules

Use Thunderbird 102

2022-07-22 13:25:10 +02:00

secrets

Add wifi networks to sops

2022-07-21 17:32:16 +02:00

users/ellmau

Fix comma dependency

2022-07-21 17:04:05 +02:00

.gitignore

gitignore updated (current machine link ignored)

2021-10-21 23:46:09 +02:00

.sops.yaml

Add network functionality

2022-07-19 14:07:07 +02:00

default.nix

Remove comma

2022-05-23 14:14:06 +02:00

flake.lock

flake.lock: Update

2022-07-25 09:51:44 +02:00

flake.nix

Fix comma dependency

2022-07-21 17:04:05 +02:00

README.md

Add firewall and update readme

2022-07-19 10:50:37 +02:00

README.md

Nix-configuration

Deploy on a new machine

setup the filesystem as you see fit
check out repository to /mnt/etc/nixos
run nixos-generate-config --root /mnt in /mnt/etc/nixos
create machines/<machine-name>/default.nix and configure the machine
move hardware-configuration.nix to machines/<machine-name>/hardware-configuration.nix
stage the machine-folder
run
nix-install --no-root-passwd --flake .#hostname --option experimental-features "nix-command flakes"

nix-sops

generate on your (sshd-enabled) machine a pgp key:
- nix shell nixpkgs#ssh-to-pgp
- sudo ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key > /etc/nixos/secrets/keys/hosts/<hostname>.asc
add the fingerprint of the new key to the /etc/nixos/.sops.yaml file
Rekey the secrets with either
- a master key
- or after a git push on another machine with enough permissions to rekey
the flakes dev-shell (nix develop) allows to use sops <sops-file> as well as sops-rekey <sops-file> to manage the keys on the system

Languages

Nix 79.6%

Emacs Lisp 12.4%

Haskell 4.6%

CSS 3%

Shell 0.4%