mirror of
https://github.com/ellmau/nixos.git
synced 2025-12-19 09:29:36 +01:00
Stefan Ellmauthaler
dcf4e3f6ee
Flake lock file updates:
• Updated input 'comma':
'github:nix-community/comma/e77d5799da844bdc7f2c0ee8d48d166c3119a2c4?narHash=sha256-Fk7fHaPVBtfQe%2BiZJ2NeUFYyJQJysxWU/74LG9vWjPI%3D' (2024-09-05)
→ 'github:nix-community/comma/10e4dccce1487175a1a0bc3c31dfb4e8c587bca8?narHash=sha256-NXOhDwETM7XO3fNaqKNBJuqjp/3Mki3sgfgqca6%2B/ag%3D' (2024-11-01)
• Updated input 'emacs-overlay':
'github:nix-community/emacs-overlay/7dc1c795e919fb76fa481874928c90b882fcf19b?narHash=sha256-/VQbqPjv3PFMerrTJy0dGpxxTjtJz8RSPIDuqiOVomk%3D' (2024-09-18)
→ 'github:nix-community/emacs-overlay/d7618a5f8b29ca9c573df4532631b621b2a763fa?narHash=sha256-Q6AmDWc3N9pLtUO90bvOafGDMhFfb%2BBSHSgz40LD/7o%3D' (2024-11-15)
• Removed input 'emacs-overlay/flake-utils'
• Removed input 'emacs-overlay/flake-utils/systems'
• Updated input 'emacs-overlay/nixpkgs-stable':
'github:NixOS/nixpkgs/086b448a5d54fd117f4dc2dee55c9f0ff461bdc1?narHash=sha256-2yV8nmYE1p9lfmLHhOCbYwQC/W8WYfGQABoGzJOb1JQ%3D' (2024-09-16)
→ 'github:NixOS/nixpkgs/689fed12a013f56d4c4d3f612489634267d86529?narHash=sha256-lKA770aUmjPHdTaJWnP3yQ9OI1TigenUqVC3wweqZuI%3D' (2024-11-12)
• Updated input 'home-manager':
'github:nix-community/home-manager/2ab00f89dd3ecf8012f5090e6d7ca1a7ea30f594?narHash=sha256-2Y6CDvD/BD43WLS77PHu6dUHbdUfFhuzkY8oJAecD/U%3D' (2024-09-17)
→ 'github:nix-community/home-manager/2f23fa308a7c067e52dfcc30a0758f47043ec176?narHash=sha256-Vl%2BWVTJwutXkimwGprnEtXc/s/s8sMuXzqXaspIGlwM%3D' (2024-09-22)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/abb448608a56a60075468e90d8acec2a7cb689b1?narHash=sha256-UbHzmaOQ18O/kCizipU70N0UQVFIfv8AiFKXw07oZ9Y%3D' (2024-09-18)
→ 'github:NixOS/nixos-hardware/f6581f1c3b137086e42a08a906bdada63045f991?narHash=sha256-T9V7CTucjRZ4Qc6pUEV/kpgNGzQbHWfGcfK6JJLfUeI%3D' (2024-11-12)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/086b448a5d54fd117f4dc2dee55c9f0ff461bdc1?narHash=sha256-2yV8nmYE1p9lfmLHhOCbYwQC/W8WYfGQABoGzJOb1JQ%3D' (2024-09-16)
→ 'github:NixOS/nixpkgs/689fed12a013f56d4c4d3f612489634267d86529?narHash=sha256-lKA770aUmjPHdTaJWnP3yQ9OI1TigenUqVC3wweqZuI%3D' (2024-11-12)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/99dc8785f6a0adac95f5e2ab05cc2e1bf666d172?narHash=sha256-gI9kkaH0ZjakJOKrdjaI/VbaMEo9qBbSUl93DnU7f4c%3D' (2024-09-16)
→ 'github:NixOS/nixpkgs/dc460ec76cbff0e66e269457d7b728432263166c?narHash=sha256-PbABj4tnbWFMfBp6OcUK5iGy1QY%2B/Z96ZcLpooIbuEI%3D' (2024-11-11)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/e2d404a7ea599a013189aa42947f66cede0645c8?narHash=sha256-qis6BtOOBBEAfUl7FMHqqTwRLB61OL5OFzIsOmRz2J4%3D' (2024-09-16)
→ 'github:Mic92/sops-nix/4c91d52db103e757fc25b58998b0576ae702d659?narHash=sha256-HC0anOL%2BKmUQ2hdRl0AtunbAckasxrkn4VLmxbW/WaA%3D' (2024-11-11)
• Updated input 'sops-nix/nixpkgs-stable':
'github:NixOS/nixpkgs/dc454045f5b5d814e5862a6d057e7bb5c29edc05?narHash=sha256-vNv%2BaJUW5/YurRy1ocfvs4q/48yVESwlC/yHzjkZSP8%3D' (2024-09-08)
→ 'github:NixOS/nixpkgs/3c2f1c4ca372622cb2f9de8016c9a0b1cbd0f37c?narHash=sha256-efgLzQAWSzJuCLiCaQUCDu4NudNlHdg2NzGLX5GYaEY%3D' (2024-11-03)
Nix-configuration
Deploy on a new machine
- setup the filesystem as you see fit
- check out repository to
/mnt/etc/nixos - run
nixos-generate-config --root /mntin/mnt/etc/nixos - create
machines/<machine-name>/default.nixand configure the machine - move
hardware-configuration.nixtomachines/<machine-name>/hardware-configuration.nix - stage the machine-folder
- run
nix-install --no-root-passwd --flake .#hostname --option experimental-features "nix-command flakes"
nix-sops
- generate on your (sshd-enabled) machine a pgp key:
nix shell nixpkgs#ssh-to-pgpsudo ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key > /etc/nixos/secrets/keys/hosts/<hostname>.asc
- add the fingerprint of the new key to the
/etc/nixos/.sops.yamlfile - Rekey the secrets with either
- a master key
- or after a git push on another machine with enough permissions to rekey
- the flakes dev-shell (
nix develop) allows to usesops <sops-file>as well assops-rekey <sops-file>to manage the keys on the system