mirror of
https://github.com/tboerger/nixos-config
synced 2024-12-26 05:24:10 +01:00
c59800bdc8
Signed-off-by: GitHub Actions <github@webhippie.de> |
||
---|---|---|
.github | ||
machines | ||
overlays | ||
profiles | ||
secrets | ||
shared | ||
.editorconfig | ||
.envrc | ||
.gitignore | ||
.releaserc | ||
CHANGELOG.md | ||
flake.lock | ||
flake.nix | ||
LICENSE | ||
README.md |
nixos-config
Provisioning for my NixOS systems based on Nix.
Prepare
Copy /etc/ssh/ssh_host_ed25519_key.pub
into secrets
and rekey the secrets via agenix, you could also just execute
ssh-keyscan ip_or_fqdn
to fetch the current public keys. After pushing the
rekeyed secrets execute the commands below.
Asgard
Bootstrap
sudo loadkeys de
sudo nix-shell --packages nixUnstable
nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode disko --flake github:tboerger/nixos-config#asgard
mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#asgard
Updates
nix run github:serokell/deploy-rs github:tboerger/nixos-config#asgard
Utgard
Bootstrap
sudo loadkeys de
sudo nix-shell --packages nixUnstable
nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode disko --flake github:tboerger/nixos-config#utgard
mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#utgard
Updates
nix run github:serokell/deploy-rs github:tboerger/nixos-config#utgard
Vanaheim
Bootstrap
sudo loadkeys de
sudo nix-shell --packages nixUnstable
nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode disko --flake github:tboerger/nixos-config#vanaheim
mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#vanaheim
Updates
nix run github:serokell/deploy-rs github:tboerger/nixos-config#vanaheim
Yggdrasil
Bootstrap
sudo loadkeys de
sudo nix-shell --packages nixUnstable
mount /dev/disk/by-label/NIXOS_SD /mnt
mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#yggdrasil
Updates
nix run github:serokell/deploy-rs github:tboerger/nixos-config#yggdrasil
Security
If you find a security issue please contact thomas@webhippie.de first.
Contributing
Fork -> Patch -> Push -> Pull Request
Authors
License
Apache-2.0
Copyright
Copyright (c) 2021 Thomas Boerger <thomas@webhippie.de>