mirror of
https://github.com/ellmau/nixos.git
synced 2025-12-19 09:29:36 +01:00
Stefan Ellmauthaler
c04be4b362
Flake lock file updates:
• Updated input 'comma':
'github:nix-community/comma/17fb129e3741ea4e4f53a9b6e172800b5bffd507?narHash=sha256-0xjEyQwGUaxk3osUAozYj2a6g7%2BVCljBk%2By06yeVlI8%3D' (2024-11-27)
→ 'github:nix-community/comma/650c41b59b4ab16327ad0cdb995c3857b9583987?narHash=sha256-a793QMuHjVB8YB8q595rlnXqlOHbuiI7ybbrB6kuJbw%3D' (2025-03-19)
• Updated input 'emacs-overlay':
'github:nix-community/emacs-overlay/7499231e05179138025dc0475e71f7e9de367ee1?narHash=sha256-i2lMhsP/hajcgxT%2BnxqKwTgRqswCQ9x76bpRSBC3/Q4%3D' (2025-02-24)
→ 'github:nix-community/emacs-overlay/d8bad40da349c15b37f83159019a5e7f452cecc6?narHash=sha256-dNSzXe3GNwoBYUBGBjXTvBaWfBSDFheWyIbEu%2Bg0Et8%3D' (2025-04-23)
• Updated input 'emacs-overlay/nixpkgs-stable':
'github:NixOS/nixpkgs/11415c7ae8539d6292f2928317ee7a8410b28bb9?narHash=sha256-SSYxFhqCOb3aiPb6MmN68yEzBIltfom8IgRz7phHscM%3D' (2025-02-21)
→ 'github:NixOS/nixpkgs/9684b53175fc6c09581e94cc85f05ab77464c7e3?narHash=sha256-AQ7M9wTa/Pa/kK5pcGTgX/DGqMHyzsyINfN7ktsI7Fo%3D' (2025-04-21)
• Updated input 'home-manager':
'github:nix-community/home-manager/9d3d080aec2a35e05a15cedd281c2384767c2cfe?narHash=sha256-Gs076ot1YuAAsYVcyidLKUMIc4ooOaRGO0PqTY7sBzA%3D' (2025-02-17)
→ 'github:nix-community/home-manager/c61bfe3ae692f42ce688b5865fac9e0de58e1387?narHash=sha256-iyn/WBYDc7OtjSawbegINDe/gIkok888kQxk3aVnkgg%3D' (2025-04-15)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/099d38a69ed75b6f549aa0daadc08c075d44a4d7?narHash=sha256-BKlYOGAiNlZs/gJVcBx7oPocpXR8%2BzfgXR7TM7tvans%3D' (2025-02-24)
→ 'github:NixOS/nixos-hardware/8bf8a2a0822365bd8f44fd1a19d7ed0a1d629d64?narHash=sha256-xmqG4MZArM1JNxPJ33s0MtuBzgnaCO9laARoU3AfP8E%3D' (2025-04-23)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/11415c7ae8539d6292f2928317ee7a8410b28bb9?narHash=sha256-SSYxFhqCOb3aiPb6MmN68yEzBIltfom8IgRz7phHscM%3D' (2025-02-21)
→ 'github:NixOS/nixpkgs/9684b53175fc6c09581e94cc85f05ab77464c7e3?narHash=sha256-AQ7M9wTa/Pa/kK5pcGTgX/DGqMHyzsyINfN7ktsI7Fo%3D' (2025-04-21)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/32fb99ba93fea2798be0e997ea331dd78167f814?narHash=sha256-ozoOtE2hGsqh4XkTJFsrTkNxkRgShxpQxDynaPZUGxk%3D' (2025-02-21)
→ 'github:NixOS/nixpkgs/c11863f1e964833214b767f4a369c6e6a7aba141?narHash=sha256-GfpyMzxwkfgRVN0cTGQSkTC0OHhEkv3Jf6Tcjm//qZ0%3D' (2025-04-21)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/07af005bb7d60c7f118d9d9f5530485da5d1e975?narHash=sha256-7JAGezJ0Dn5qIyA2%2BT4Dt/xQgAbhCglh6lzCekTVMeU%3D' (2025-02-11)
→ 'github:Mic92/sops-nix/5e3e92b16d6fdf9923425a8d4df7496b2434f39c?narHash=sha256-ePyTpKEJTgX0gvgNQWd7tQYQ3glIkbqcW778RpHlqgA%3D' (2025-04-22)
Nix-configuration
Deploy on a new machine
- setup the filesystem as you see fit
- check out repository to
/mnt/etc/nixos - run
nixos-generate-config --root /mntin/mnt/etc/nixos - create
machines/<machine-name>/default.nixand configure the machine - move
hardware-configuration.nixtomachines/<machine-name>/hardware-configuration.nix - stage the machine-folder
- run
nix-install --no-root-passwd --flake .#hostname --option experimental-features "nix-command flakes"
nix-sops
- generate on your (sshd-enabled) machine a pgp key:
nix shell nixpkgs#ssh-to-pgpsudo ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key > /etc/nixos/secrets/keys/hosts/<hostname>.asc
- add the fingerprint of the new key to the
/etc/nixos/.sops.yamlfile - Rekey the secrets with either
- a master key
- or after a git push on another machine with enough permissions to rekey
- the flakes dev-shell (
nix develop) allows to usesops <sops-file>as well assops-rekey <sops-file>to manage the keys on the system