No description
Find a file
reo101 e3b1539b41
refactor(flake)!: deduplicate code in configurations flake module
Pass around `perSystem`'s `pkgs` instances to the system configurations
Some more refactoring in `configurations`' `mkHost` functions
Also start using `home-manager`'s `useGlobalPkgs` option
Also use `mkShellNoCC` for default `devShell`
Also `nix flake update`
2024-07-20 14:30:25 +03:00
.github/workflows chore(cicd): update install-nix-action to v20, add flakehub 2023-11-17 17:44:50 +02:00
apps feat(flake): add apps 2023-02-19 13:54:02 +02:00
machines refactor(flake)!: deduplicate code in configurations flake module 2024-07-20 14:30:25 +03:00
modules refactor(flake)!: deduplicate code in configurations flake module 2024-07-20 14:30:25 +03:00
nix refactor(flake)!: deduplicate code in configurations flake module 2024-07-20 14:30:25 +03:00
overlays refactor(flake)!: deduplicate code in configurations flake module 2024-07-20 14:30:25 +03:00
pkgs feat(pkgs)!: update swww to v0.9.5 2024-07-19 01:41:55 +03:00
secrets feat(flake)!: convert everything to flake-parts-style flake modules 2024-07-19 01:14:24 +03:00
shells refactor(flake)!: deduplicate code in configurations flake module 2024-07-20 14:30:25 +03:00
templates refactor(flake)!: deduplicate code in configurations flake module 2024-07-20 14:30:25 +03:00
.envrc feat(flake): add .envrc for direnv 2023-10-23 09:05:55 +03:00
.gitignore feat(flake)!: convert everything to flake-parts-style flake modules 2024-07-19 01:14:24 +03:00
default.nix feat(nix): compat default.nix && shell.nix 2023-09-06 20:48:11 +03:00
flake.lock refactor(flake)!: deduplicate code in configurations flake module 2024-07-20 14:30:25 +03:00
flake.nix refactor(flake)!: deduplicate code in configurations flake module 2024-07-20 14:30:25 +03:00
LICENSE feat(config): initial 2022-11-20 17:23:58 +02:00
nixpkgs.nix feat(config): initial 2022-11-20 17:23:58 +02:00
README.md feat(README): add notes about secrets management 2023-11-17 15:59:32 +02:00
shell.nix feat(nix): compat default.nix && shell.nix 2023-09-06 20:48:11 +03:00

nix


Secrets

# To put `agenix` and friends in `$PATH`
nix develop
cd secrets

Make new key

rage-keygen -o key

Edit secret

agenix -i key -e sub/dir/secret_file.age

Rekey all secrets

agenix -i key --rekey

NixOS setup

# Initial setup
nix run nixpkgs#nixos-anywhere -- --flake .#${HOSTNAME} --build-on-remote --ssh-port 22 root@${HOSTNAME} --no-reboott

# Deploy
deploy .#${HOSTNAME} --skip-checks

Mac (silicon) setup

# Setup system tools
softwareupdate --install-rosetta --agree-to-license
sudo xcodebuild -license

# Install nix
curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix | sh -s -- install

# Apply configuration
git clone https://www.github.com/reo101/rix101 ~/.config/rix101
cd ~/.config/rix101
nix build ".#darwinConfigurations.${HOSTNAME}.system"
./result/sw/bin/darwin-rebuild switch --flake .

# System setup for `yabai` (in system recovery)
csrutil enable --without fs --without debug --without nvram