1
0
mirror of https://github.com/tboerger/nixos-config synced 2024-12-26 05:24:10 +01:00
Go to file
GitHub Actions c59800bdc8 chore(flake): updated lockfile [skip ci]
Signed-off-by: GitHub Actions <github@webhippie.de>
2024-12-23 08:04:50 +00:00
.github docs: automated release update [skip ci] 2024-12-23 08:01:20 +00:00
machines fix: try to make check happy again 2024-11-24 16:31:08 +01:00
overlays feat: integrate most required services 2024-07-17 16:05:33 +02:00
profiles fix: try to make check happy again 2024-11-24 16:31:08 +01:00
secrets feat: integrate most required services 2024-07-17 16:05:33 +02:00
shared fix: try to make check happy again 2024-11-24 16:31:08 +01:00
.editorconfig chore: initial commit 2022-02-20 17:46:48 +01:00
.envrc chore: integrate deploy-rs and flake-utils 2022-09-28 22:28:36 +02:00
.gitignore feat: simply commit all last changes 2024-11-23 13:38:34 +01:00
.releaserc ci: add missing release config 2024-11-24 15:53:31 +01:00
CHANGELOG.md chore: release 1.1.0 2024-11-25 08:01:22 +00:00
flake.lock chore(flake): updated lockfile [skip ci] 2024-12-23 08:04:50 +00:00
flake.nix fix: try to make check happy again 2024-11-24 16:31:08 +01:00
LICENSE chore: initial commit 2022-02-20 17:46:48 +01:00
README.md feat: renamed forlders to machines and profiles 2024-11-24 16:13:14 +01:00

nixos-config

Build

Provisioning for my NixOS systems based on Nix.

Prepare

Copy /etc/ssh/ssh_host_ed25519_key.pub into secrets and rekey the secrets via agenix, you could also just execute ssh-keyscan ip_or_fqdn to fetch the current public keys. After pushing the rekeyed secrets execute the commands below.

Asgard

Bootstrap

sudo loadkeys de
sudo nix-shell --packages nixUnstable

nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode disko --flake github:tboerger/nixos-config#asgard

mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#asgard

Updates

nix run github:serokell/deploy-rs github:tboerger/nixos-config#asgard

Utgard

Bootstrap

sudo loadkeys de
sudo nix-shell --packages nixUnstable

nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode disko --flake github:tboerger/nixos-config#utgard

mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#utgard

Updates

nix run github:serokell/deploy-rs github:tboerger/nixos-config#utgard

Vanaheim

Bootstrap

sudo loadkeys de
sudo nix-shell --packages nixUnstable

nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode disko --flake github:tboerger/nixos-config#vanaheim

mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#vanaheim

Updates

nix run github:serokell/deploy-rs github:tboerger/nixos-config#vanaheim

Yggdrasil

Bootstrap

sudo loadkeys de
sudo nix-shell --packages nixUnstable

mount /dev/disk/by-label/NIXOS_SD /mnt

mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#yggdrasil

Updates

nix run github:serokell/deploy-rs github:tboerger/nixos-config#yggdrasil

Security

If you find a security issue please contact thomas@webhippie.de first.

Contributing

Fork -> Patch -> Push -> Pull Request

Authors

License

Apache-2.0

Copyright (c) 2021 Thomas Boerger <thomas@webhippie.de>