mirror of
https://github.com/ellmau/nixos.git
synced 2025-12-19 09:29:36 +01:00
Stefan Ellmauthaler
c631a00116
Flake lock file updates:
• Updated input 'comma':
'github:nix-community/comma/650c41b59b4ab16327ad0cdb995c3857b9583987' (2025-03-19)
→ 'github:nix-community/comma/27ce74dda284f57ad17daf3d17ffda2bd67e4b0a' (2025-07-13)
• Updated input 'comma/flake-compat':
'github:edolstra/flake-compat/0f9255e01c2351cc7d116c072cb317785dd33b33' (2023-10-04)
→ 'github:edolstra/flake-compat/9100a0f413b0c601e0533d1d94ffd501ce2e7885' (2025-05-12)
• Updated input 'comma/naersk':
'github:nix-community/naersk/3fb418eaf352498f6b6c30592e3beb63df42ef11' (2024-07-23)
→ 'github:nix-community/naersk/0473954e399eec0081ee816f3430c17d1f7e5a42' (2025-07-07)
• Updated input 'emacs-overlay':
'github:nix-community/emacs-overlay/d8bad40da349c15b37f83159019a5e7f452cecc6' (2025-04-23)
→ 'github:nix-community/emacs-overlay/ec568d50f0c82751c60c99efa282f1392d515ab4' (2025-07-18)
• Updated input 'emacs-overlay/nixpkgs-stable':
'github:NixOS/nixpkgs/9684b53175fc6c09581e94cc85f05ab77464c7e3' (2025-04-21)
→ 'github:NixOS/nixpkgs/50ab793786d9de88ee30ec4e4c24fb4236fc2674' (2025-06-30)
• Updated input 'glpi-inventory':
'github:mmarx/glpi-inventory/dd3511453c81adbb3965f5dd089fe6956c37d318' (2025-01-27)
→ 'github:mmarx/glpi-inventory/23c74136a320804c3f737219cf3522b3ebb4b4cf' (2025-05-26)
• Updated input 'lix-module':
'2226eb3b97.tar.gz?narHash=sha256-FXndw1CihZcqQu49DziuMQuc0fG8L0nvGkm0JHZKimo%3D&rev=2226eb3b97f0f89fdcd5bf2d0a2c7723cf771a62' (2025-06-01)
→ '8b1094356f.tar.gz?narHash=sha256-SXUAlxpjPRkArRMHy5%2BHdi%2BPiC%2BND9yzzIjiaHmTvQU%3D&rev=8b1094356f4723d6e89d3f8a95b333ee16d9ab02' (2025-06-29)
• Updated input 'lix-module/lix':
'fbd6a014ec.tar.gz?narHash=sha256-L1p9RbZMXS2Ac0d61dgi1QlzN1CrfQIMtrB3/t5M2ag%3D&rev=fbd6a014ec8e540b817cc18020ff47f4a14f143d' (2025-06-19)
→ '1d7368585e.tar.gz?narHash=sha256-J4ycLoXHPsoBoQtEXFCelL4xlq5pT8U9tNWNKm43%2BYI%3D&rev=1d7368585eebaa2c4bdbcb88fe600cfb2239b2c6' (2025-06-29)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/8bf8a2a0822365bd8f44fd1a19d7ed0a1d629d64' (2025-04-23)
→ 'github:NixOS/nixos-hardware/d1bfa8f6ccfb5c383e1eba609c1eb67ca24ed153' (2025-07-16)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/c11863f1e964833214b767f4a369c6e6a7aba141' (2025-04-21)
→ 'github:NixOS/nixpkgs/6e987485eb2c77e5dcc5af4e3c70843711ef9251' (2025-07-16)
• Updated input 'simple-nixos-mailserver/flake-compat':
'github:edolstra/flake-compat/0f9255e01c2351cc7d116c072cb317785dd33b33' (2023-10-04)
→ 'github:edolstra/flake-compat/9100a0f413b0c601e0533d1d94ffd501ce2e7885' (2025-05-12)
• Updated input 'simple-nixos-mailserver/git-hooks':
'github:cachix/git-hooks.nix/16ec914f6fb6f599ce988427d9d94efddf25fe6d' (2025-06-24)
→ 'github:cachix/git-hooks.nix/dcf5072734cb576d2b0c59b2ac44f5050b5eac82' (2025-03-22)
• Updated input 'simple-nixos-mailserver/nixpkgs-25_05':
'github:NixOS/nixpkgs/32a4e87942101f1c9f9865e04dc3ddb175f5f32e' (2025-07-15)
→ 'github:NixOS/nixpkgs/ca49c4304acf0973078db0a9d200fd2bae75676d' (2025-05-18)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/5e3e92b16d6fdf9923425a8d4df7496b2434f39c' (2025-04-22)
→ 'github:Mic92/sops-nix/2c8def626f54708a9c38a5861866660395bb3461' (2025-07-15)
Nix-configuration
Deploy on a new machine
- setup the filesystem as you see fit
- check out repository to
/mnt/etc/nixos - run
nixos-generate-config --root /mntin/mnt/etc/nixos - create
machines/<machine-name>/default.nixand configure the machine - move
hardware-configuration.nixtomachines/<machine-name>/hardware-configuration.nix - stage the machine-folder
- run
nix-install --no-root-passwd --flake .#hostname --option experimental-features "nix-command flakes"
nix-sops
- generate on your (sshd-enabled) machine a pgp key:
nix shell nixpkgs#ssh-to-pgpsudo ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key > /etc/nixos/secrets/keys/hosts/<hostname>.asc
- add the fingerprint of the new key to the
/etc/nixos/.sops.yamlfile - Rekey the secrets with either
- a master key
- or after a git push on another machine with enough permissions to rekey
- the flakes dev-shell (
nix develop) allows to usesops <sops-file>as well assops-rekey <sops-file>to manage the keys on the system