No description
Find a file
reo101 4afa641a4d
feat(limonka)!: jellyfin and transmission config
Add config for the `jellyfin` service
Add config for the `transmission` service
Fix networking issue (DNS died after some time)
Rename `jeeves_password` secret
Fix deprecated `passwordFile` -> `hashedPasswordFile`
2023-11-17 16:03:25 +02:00
.github/workflows chore(cicd): update install-nix-action to v20 2023-04-17 03:19:32 +03:00
apps feat(flake): add apps 2023-02-19 13:54:02 +02:00
machines feat(limonka)!: jellyfin and transmission config 2023-11-17 16:03:25 +02:00
modules fix(nushell): comment out old cd config 2023-11-17 16:02:04 +02:00
overlays feat(overlay): add darwin support for himalaya 2023-09-06 22:08:56 +03:00
pkgs feat(pkgs): add pngpaste 2023-09-06 21:23:50 +03:00
secrets fix(jeeves): wireguard peer's PublicKey should not be a file 2023-10-23 09:24:31 +03:00
shells feat(jeeves): wireguard 2023-10-23 08:59:49 +03:00
templates fix(templates): rm haskell template declaration 2023-07-13 14:44:12 +03:00
util feat(nixos)!: do not automatically import the nur nixosModule 2023-10-17 09:12:11 +03:00
.envrc feat(flake): add .envrc for direnv 2023-10-23 09:05:55 +03:00
.gitignore feat(flake): add .envrc for direnv 2023-10-23 09:05:55 +03:00
default.nix feat(nix): compat default.nix && shell.nix 2023-09-06 20:48:11 +03:00
flake.lock feat(jeeves)!: add config 2023-10-17 09:12:09 +03:00
flake.nix fix(macos): trampoline apps 2023-11-17 15:58:59 +02:00
LICENSE feat(config): initial 2022-11-20 17:23:58 +02:00
nixpkgs.nix feat(config): initial 2022-11-20 17:23:58 +02:00
README.md feat(README): add notes about secrets management 2023-11-17 15:59:32 +02:00
shell.nix feat(nix): compat default.nix && shell.nix 2023-09-06 20:48:11 +03:00

nix


Secrets

# To put `agenix` and friends in `$PATH`
nix develop
cd secrets

Make new key

rage-keygen -o key

Edit secret

agenix -i key -e sub/dir/secret_file.age

Rekey all secrets

agenix -i key --rekey

NixOS setup

# Initial setup
nix run nixpkgs#nixos-anywhere -- --flake .#${HOSTNAME} --build-on-remote --ssh-port 22 root@${HOSTNAME} --no-reboott

# Deploy
deploy .#${HOSTNAME} --skip-checks

Mac (silicon) setup

# Setup system tools
softwareupdate --install-rosetta --agree-to-license
sudo xcodebuild -license

# Install nix
curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix | sh -s -- install

# Apply configuration
git clone https://www.github.com/reo101/rix101 ~/.config/rix101
cd ~/.config/rix101
nix build ".#darwinConfigurations.${HOSTNAME}.system"
./result/sw/bin/darwin-rebuild switch --flake .

# System setup for `yabai` (in system recovery)
csrutil enable --without fs --without debug --without nvram