nixos-config

Provisioning for my NixOS systems based on Nix.

Secrets

Generally all secrets are encrypted with agenix, so make sure to copy the SSH keys from the secrets stick with these commands:

mkdir -p $HOME/.ssh
cp /mnt/secrets/ssh/id_* $HOME/.ssh/
chmod u=rw,g=,o= $HOME/.ssh/id_*

Prepare

Midgard

Bootstrap

bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/partitions)" midgard
nixos-install --root /mnt --flake github:tboerger/nixos-config\#midgard

Updates

If the repository had been cloned you could just execute make switch, otherwise there is still this long option to update the deployment:

nixos-rebuild switch \
    --flake github:tboerger/nixos-config\#midgard

Utgard

Bootstrap

bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/partitions)" utgard
nixos-install --root /mnt --flake github:tboerger/nixos-config\#utgard

Updates

If the repository had been cloned you could just execute make switch, otherwise there is still this long option to update the deployment:

nixos-rebuild switch \
    --flake github:tboerger/nixos-config\#utgard

Asgard

Bootstrap

bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/partitions)" asgard
nixos-install --root /mnt --flake github:tboerger/nixos-config\#asgard

Updates

If the repository had been cloned you could just execute make switch, otherwise there is still this long option to update the deployment:

nixos-rebuild switch \
    --flake github:tboerger/nixos-config\#asgard

Security

If you find a security issue please contact thomas@webhippie.de first.

Contributing

Fork -> Patch -> Push -> Pull Request

Authors

• Thomas Boerger

License

Apache-2.0

Copyright

Copyright (c) 2021 Thomas Boerger <thomas@webhippie.de>