mirror of
https://github.com/ellmau/nixos.git
synced 2025-12-19 09:29:36 +01:00
Stefan Ellmauthaler
fcfac1756e
Flake lock file updates:
• Updated input 'comma':
'github:nix-community/comma/efe30c16fcb9780ef8f8a4e5aa76977c89c6827b' (2024-04-18)
→ 'github:nix-community/comma/062daa39f1ab8a923f5df03745dd2546a5fae41c' (2024-05-26)
• Updated input 'emacs-overlay':
'github:nix-community/emacs-overlay/cb16f015f4dd579cf5bd00d09e6a7ada6e72f5ab' (2024-04-22)
→ 'github:nix-community/emacs-overlay/e3a8a67ce663448e33f01c8dd94c4d7218b634a6' (2024-06-10)
• Updated input 'emacs-overlay/nixpkgs-stable':
'github:NixOS/nixpkgs/a5e4bbcb4780c63c79c87d29ea409abf097de3f7' (2024-04-21)
→ 'github:NixOS/nixpkgs/4913a7c3d8b8d00cb9476a6bd730ff57777f740c' (2024-06-08)
• Updated input 'flake-utils-plus':
'github:gytis-ivaskevicius/flake-utils-plus/bfc53579db89de750b25b0c5e7af299e0c06d7d3' (2023-10-03)
→ 'github:gytis-ivaskevicius/flake-utils-plus/3542fe9126dc492e53ddd252bb0260fe035f2c0f' (2024-05-12)
• Updated input 'glpi-inventory':
'github:mmarx/glpi-inventory/0de51cf35c238b6be5a26a1d697ba80c3343ae0d' (2024-04-11)
→ 'github:mmarx/glpi-inventory/6527876cae41a4b0b1b062a2ccd74f704383b926' (2024-05-31)
• Updated input 'home-manager':
'github:nix-community/home-manager/d6bb9f934f2870e5cbc5b94c79e9db22246141ff' (2024-04-06)
→ 'github:nix-community/home-manager/095ef64aa3b2ab4a4f1bf07f29997e21e3a5576a' (2024-06-04)
• Updated input 'nixos-hardware':
'github:NixOS/nixos-hardware/5d48925b815fd202781bfae8fb6f45c07112fdb2' (2024-04-19)
→ 'github:NixOS/nixos-hardware/58b52b0dd191af70f538c707c66c682331cfdffc' (2024-06-10)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/a5e4bbcb4780c63c79c87d29ea409abf097de3f7' (2024-04-21)
→ 'github:NixOS/nixpkgs/4913a7c3d8b8d00cb9476a6bd730ff57777f740c' (2024-06-08)
• Updated input 'nixpkgs-unstable':
'github:NixOS/nixpkgs/5c24cf2f0a12ad855f444c30b2421d044120c66f' (2024-04-19)
→ 'github:NixOS/nixpkgs/051f920625ab5aabe37c920346e3e69d7d34400e' (2024-06-07)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/4371a1301c4d36cc791069d90ae522613a3a335e' (2024-04-22)
→ 'github:Mic92/sops-nix/f0922ad001829b400f0160ba85b47d252fa3d925' (2024-06-09)
• Updated input 'sops-nix/nixpkgs-stable':
'github:NixOS/nixpkgs/74574c38577914733b4f7a775dd77d24245081dd' (2024-04-20)
→ 'github:NixOS/nixpkgs/4913a7c3d8b8d00cb9476a6bd730ff57777f740c' (2024-06-08)
Nix-configuration
Deploy on a new machine
- setup the filesystem as you see fit
- check out repository to
/mnt/etc/nixos - run
nixos-generate-config --root /mntin/mnt/etc/nixos - create
machines/<machine-name>/default.nixand configure the machine - move
hardware-configuration.nixtomachines/<machine-name>/hardware-configuration.nix - stage the machine-folder
- run
nix-install --no-root-passwd --flake .#hostname --option experimental-features "nix-command flakes"
nix-sops
- generate on your (sshd-enabled) machine a pgp key:
nix shell nixpkgs#ssh-to-pgpsudo ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key > /etc/nixos/secrets/keys/hosts/<hostname>.asc
- add the fingerprint of the new key to the
/etc/nixos/.sops.yamlfile - Rekey the secrets with either
- a master key
- or after a git push on another machine with enough permissions to rekey
- the flakes dev-shell (
nix develop) allows to usesops <sops-file>as well assops-rekey <sops-file>to manage the keys on the system