.github | ||
machines | ||
overlays | ||
profiles | ||
scripts | ||
secrets | ||
.editorconfig | ||
.envrc | ||
.gitignore | ||
flake.lock | ||
flake.nix | ||
LICENSE | ||
Makefile | ||
README.md | ||
TODO.md |
nixos-config
Provisioning for my NixOS systems based on Nix.
Secrets
Generally all secrets are encrypted with agenix, so make sure to copy
the SSH keys from the secrets
stick with these commands:
mkdir -p $HOME/.ssh
cp /mnt/secrets/ssh/id_* $HOME/.ssh/
chmod u=rw,g=,o= $HOME/.ssh/id_*
Chnum
Bootstrap
sudo loadkeys de
sudo nix-shell --packages nixUnstable
bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/chnum-partitions)"
nixos-install --root /mnt --flake github:tboerger/nixos-config#chnum
Updates
If the repository had been cloned you could just execute make switch
,
otherwise there is still this long option to update the deployment:
nixos-rebuild switch \
--flake github:tboerger/nixos-config#chnum
Asgard
Bootstrap
sudo loadkeys de
sudo nix-shell --packages nixUnstable
bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/asgard-partitions)"
nixos-install --root /mnt --flake github:tboerger/nixos-config#asgard
Updates
If the repository had been cloned you could just execute make switch
,
otherwise there is still this long option to update the deployment:
nixos-rebuild switch \
--flake github:tboerger/nixos-config#asgard
Utgard
Bootstrap
sudo loadkeys de
sudo nix-shell --packages nixUnstable
bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/utgard-partitions)"
nixos-install --root /mnt --flake github:tboerger/nixos-config#utgard
Updates
If the repository had been cloned you could just execute make switch
,
otherwise there is still this long option to update the deployment:
nixos-rebuild switch \
--flake github:tboerger/nixos-config#utgard
Midgard
Bootstrap
sudo loadkeys de
sudo nix-shell --packages nixUnstable
mount /dev/disk/by-label/NIXOS_SD /mnt
nixos-install --root /mnt --flake github:tboerger/nixos-config#midgard
Updates
If the repository had been cloned you could just execute make switch
,
otherwise there is still this long option to update the deployment:
nixos-rebuild switch \
--flake github:tboerger/nixos-config#midgard
Security
If you find a security issue please contact thomas@webhippie.de first.
Contributing
Fork -> Patch -> Push -> Pull Request
Authors
License
Apache-2.0
Copyright
Copyright (c) 2021 Thomas Boerger <thomas@webhippie.de>