No description
Find a file
reo101 be2ad3ccfd
fix(homebrew)!: do not reinstall on activation
`/usr/local/bin/brew` was the path for `x86_64-darwin`
`aarch64-darwin` uses `/opt/homebrew/bin/brew`
Use `${config.homebrew.brewPrefix}` to support both
See <c0d5b8c54d/modules/homebrew.nix (L561)>
2024-06-01 14:44:07 +03:00
.github/workflows chore(cicd): update install-nix-action to v20, add flakehub 2023-11-17 17:44:50 +02:00
apps feat(flake): add apps 2023-02-19 13:54:02 +02:00
machines fix(limonka): remove neovim shenanigans 2024-05-26 21:23:39 +03:00
modules fix(homebrew)!: do not reinstall on activation 2024-06-01 14:44:07 +03:00
overlays chore!: spring cleaning 2024-05-26 12:46:52 +03:00
pkgs fix(build)!: do not expose pngpaste 2024-05-26 21:26:35 +03:00
secrets fix(wireguard)!: AllowedIPs semantics 2024-01-08 23:44:22 +02:00
shells feat(flake)!: update 2024-05-04 22:47:27 +03:00
templates fix(templates): rm haskell template declaration 2023-07-13 14:44:12 +03:00
util chore(cheetah)!: update config 2024-01-04 01:05:54 +02:00
.envrc feat(flake): add .envrc for direnv 2023-10-23 09:05:55 +03:00
.gitignore feat(agenix-rekey)!: first try 2023-12-25 18:47:17 +02:00
default.nix feat(nix): compat default.nix && shell.nix 2023-09-06 20:48:11 +03:00
flake.lock fix(limonka): remove neovim shenanigans 2024-05-26 21:23:39 +03:00
flake.nix chore!: spring cleaning 2024-05-26 12:46:52 +03:00
LICENSE feat(config): initial 2022-11-20 17:23:58 +02:00
nixpkgs.nix feat(config): initial 2022-11-20 17:23:58 +02:00
README.md feat(README): add notes about secrets management 2023-11-17 15:59:32 +02:00
shell.nix feat(nix): compat default.nix && shell.nix 2023-09-06 20:48:11 +03:00

nix


Secrets

# To put `agenix` and friends in `$PATH`
nix develop
cd secrets

Make new key

rage-keygen -o key

Edit secret

agenix -i key -e sub/dir/secret_file.age

Rekey all secrets

agenix -i key --rekey

NixOS setup

# Initial setup
nix run nixpkgs#nixos-anywhere -- --flake .#${HOSTNAME} --build-on-remote --ssh-port 22 root@${HOSTNAME} --no-reboott

# Deploy
deploy .#${HOSTNAME} --skip-checks

Mac (silicon) setup

# Setup system tools
softwareupdate --install-rosetta --agree-to-license
sudo xcodebuild -license

# Install nix
curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix | sh -s -- install

# Apply configuration
git clone https://www.github.com/reo101/rix101 ~/.config/rix101
cd ~/.config/rix101
nix build ".#darwinConfigurations.${HOSTNAME}.system"
./result/sw/bin/darwin-rebuild switch --flake .

# System setup for `yabai` (in system recovery)
csrutil enable --without fs --without debug --without nvram