mirror of
https://github.com/ellmau/nixos.git
synced 2025-12-19 09:29:36 +01:00
Stefan Ellmauthaler
d599af9c97
Flake lock file updates:
• Added input 'comma':
'github:nix-community/comma/75c9adac36eee0d6ed7217b61fc5d8e259a91de0' (2022-06-11)
• Added input 'comma/flake-compat':
'github:edolstra/flake-compat/b4a34015c698c7793d592d66adbab377907a2be8' (2022-04-19)
• Added input 'comma/naersk':
'github:nix-community/naersk/69daaceebe12c070cd5ae69ba38f277bbf033695' (2022-05-24)
• Added input 'comma/naersk/nixpkgs':
follows 'comma/nixpkgs'
• Added input 'comma/nixpkgs':
follows 'nixpkgs'
• Added input 'comma/utils':
follows 'flake-utils-plus/flake-utils'
• Added input 'dwarffs':
'github:edolstra/dwarffs/e768ce3239156de05f7ff3210d86a80762730f30' (2022-03-06)
• Added input 'dwarffs/nix':
'github:NixOS/nix/b09baf690bb00125805a02e0feae9636b2114599' (2022-03-03)
• Added input 'dwarffs/nix/lowdown-src':
'github:kristapsdz/lowdown/d2c2b44ff6c27b936ec27358a2653caaef8f73b8' (2021-10-06)
• Added input 'dwarffs/nix/nixpkgs':
'github:NixOS/nixpkgs/82891b5e2c2359d7e58d08849e4c89511ab94234' (2021-09-28)
• Added input 'dwarffs/nix/nixpkgs-regression':
'github:NixOS/nixpkgs/215d4d0fd80ca5163643b03a33fde804a29cc1e2' (2022-01-24)
• Added input 'dwarffs/nixpkgs':
follows 'nixpkgs'
• Added input 'emacs-overlay':
'github:nix-community/emacs-overlay/4e8d0496a9038d3fd8b8d084318524564177d67c' (2022-06-13)
• Added input 'emacs-overlay/flake-utils':
'github:numtide/flake-utils/1ed9fb1935d260de5fe1c2f7ee0ebaae17ed2fa1' (2022-05-30)
• Added input 'emacs-overlay/nixpkgs':
follows 'nixpkgs'
• Added input 'flake-utils-plus':
'github:gytis-ivaskevicius/flake-utils-plus/f8d6d1f87b6177e3bc674c29f247bdbf897ba274' (2022-05-16)
• Added input 'flake-utils-plus/flake-utils':
'github:numtide/flake-utils/3cecb5b042f7f209c56ffd8371b2711a290ec797' (2022-02-07)
• Added input 'home-manager':
'github:nix-community/home-manager/ac2287df5a2d6f0a44bbcbd11701dbbf6ec43675' (2022-06-01)
• Added input 'home-manager/nixpkgs':
follows 'nixpkgs'
• Added input 'nixos-hardware':
'github:NixOS/nixos-hardware/0cab18a48de7914ef8cad35dca0bb36868f3e1af' (2022-06-01)
• Added input 'nixpkgs':
'github:NixOS/nixpkgs/1f8d88087a3753e55a29b5207f7f0997f7c813fa' (2022-06-12)
• Added input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/90cd5459a1fd707819b9a3fb9c852beaaac3b79a' (2022-06-11)
• Added input 'simple-nixos-mailserver':
'gitlab:simple-nixos-mailserver/nixos-mailserver/6e3a7b2ea6f0d68b82027b988aa25d3423787303' (2021-12-07)
• Added input 'simple-nixos-mailserver/blobs':
'gitlab:simple-nixos-mailserver/blobs/2cccdf1ca48316f2cfd1c9a0017e8de5a7156265' (2020-11-10)
• Added input 'simple-nixos-mailserver/nixpkgs':
follows 'nixpkgs'
• Added input 'simple-nixos-mailserver/nixpkgs-21_05':
'github:NixOS/nixpkgs/c06613c25df3fe1dd26243847a3c105cf6770627' (2021-07-07)
• Added input 'simple-nixos-mailserver/nixpkgs-21_11':
'github:NixOS/nixpkgs/a640d8394f34714578f3e6335fc767d0755d78f9' (2021-12-01)
• Added input 'simple-nixos-mailserver/utils':
'github:numtide/flake-utils/5021eac20303a61fafe17224c087f5519baed54d' (2020-11-14)
• Added input 'sops-nix':
'github:Mic92/sops-nix/f075361ecbde21535b38e41dfaa28a28f160855c' (2022-06-05)
• Added input 'sops-nix/nixpkgs':
follows 'nixpkgs'
• Added input 'sops-nix/nixpkgs-21_11':
'github:NixOS/nixpkgs/2de556c4cd46a59e8ce2f85ee4dd400983213d45' (2022-06-04)
• Added input 'sops-nix/nixpkgs-22_05':
'github:NixOS/nixpkgs/d6cb04299ce8964290ae7fdcb87aa50da0500b5c' (2022-06-04)
Nix-configuration
Deploy on a new machine
- setup the filesystem as you see fit
- check out repository to
/mnt/etc/nixos - run
nixos-generate-config --root /mntin/mnt/etc/nixos - create
machines/<machine-name>/default.nixand configure the machine - move
hardware-configuration.nixtomachines/<machine-name>/hardware-configuration.nix - stage the machine-folder
- run
nix-install --no-root-passwd --flake .#hostname --option experimental-features "nix-command flakes"
nix-sops
- generate on your (sshd-enabled) machine a pgp key:
nix shell nixpkgs#ssh-to-pgpsudo ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key > /etc/nixos/secrets/keys/hosts/<hostname>.asc
- add the fingerprint of the new key to the
/etc/nixos/.sops.yamlfile - Rekey the secrets with either
- a master key
- or after a git push on another machine with enough permissions to rekey
- the flakes dev-shell (
nix devshell) allows to usesops <sops-file>as well assops-rekey <sops-file>to manage the keys on the system