top-level configurations for all my NixOS machines
Go to file
colin 03ea7e7fa5 flake update: `nixpkgs 2022-10-30 -> 2022-10-31` and stable home-manager
```
• Updated input 'home-manager':
    'github:nix-community/home-manager/d8b233ad03dd3d82424561512b40971569b2e5d2' (2022-10-31)
  → 'github:nix-community/home-manager/f0ecd4b1db5e15103e955b18cb94bea4296e5c45' (2022-11-01)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/412b9917cea092f3d39f9cd5dead4effd5bc4053' (2022-10-30)
  → 'github:NixOS/nixpkgs/d40fea9aeb8840fea0d377baa4b38e39b9582458' (2022-10-31)
• Updated input 'nixpkgs-stable':
    'github:NixOS/nixpkgs/26eb67abc9a7370a51fcb86ece18eaf19ae9207f' (2022-10-30)
  → 'github:NixOS/nixpkgs/1b4722674c315de0e191d0d79790b4eac51570a1' (2022-10-31)
```
2022-11-01 05:09:04 -07:00
machines pleroma: port ExifTool config 2022-10-25 04:11:47 -07:00
modules browser: switch from librewolf to firefox-esr 2022-11-01 04:58:45 -07:00
nixpatches flake update: `nixpkgs 2022-10-30 -> 2022-10-31` and stable home-manager 2022-11-01 05:09:04 -07:00
pkgs browserpass-extension: init at 3.7.2 2022-11-01 04:57:34 -07:00
scripts commit `ensure-perms` script for image post-processing 2022-10-21 02:04:30 -07:00
secrets moby: change password 2022-10-24 08:33:51 -07:00
.gitignore move secrets to a subdirectory, for improved overrides 2022-05-26 23:52:08 -07:00
.sops.yaml moby: enable a statically-assigned but encrypted password 2022-10-24 07:39:50 -07:00
flake.lock flake update: `nixpkgs 2022-10-30 -> 2022-10-31` and stable home-manager 2022-11-01 05:09:04 -07:00
flake.nix gocryptfs: cross-compile for aarch64 2022-10-31 03:05:24 -07:00
readme.md readme: document how to build nixpkgs and cross packages 2022-10-15 01:28:30 -07:00

readme.md

to deploy:

nixos-rebuild --flake "./#servo" {build,switch}

more options (like building packages defined in this repo):

nix flake show

secrets

i use sops for secrets. see modules/universal/secrets.nix for some tips.

building images

to build a distributable image (GPT-formatted image with rootfs and /boot partition):

nix build ./#imgs.lappy

this can then be dd'd onto a disk and directly booted from a EFI system. there's some post-processing to do before running a rebuild on the deployed system (deploying ssh keys, optionally changing fs UUIDs, etc). refer to flake.nix for more details.

building packages

to build one of the custom sane packages, just name it:

nix build ./#fluffychat-moby

to build a nixpkg:

nix build ./#nixpkgs.curl

to build a package for another platform:

nix build ./#packages.aarch64-linux.nixpkgs.ubootRaspberryPi4_64bit