got nixos-anywhere half working
This commit is contained in:
		
							parent
							
								
									430e1e8012
								
							
						
					
					
						commit
						5df7df6129
					
				
					 6 changed files with 193 additions and 17 deletions
				
			
		
							
								
								
									
										21
									
								
								README.md
									
										
									
									
									
								
							
							
						
						
									
										21
									
								
								README.md
									
										
									
									
									
								
							|  | @ -17,25 +17,31 @@ | |||
| `./rebuild.sh` | ||||
| 
 | ||||
| # New machine setup | ||||
| 
 | ||||
| keys for decrypting password secrets for each users located at ~/.config/sops/age/keys.txt | ||||
| > TODO: `keys.txt`` should prob be readable by owning user only? | ||||
| 
 | ||||
| updating passwords: `sops secrets/secrets.yaml` | ||||
| 
 | ||||
| TODO: keys.txt should prob be readable by owning user only? | ||||
| `nix run github:nix-community/nixos-anywhere/69ad3f4a50cfb711048f54013404762c9a8e201e -- --flake '.#defiant' nixos@192.168.1.130 --extra-files ~/.config/sops/age/` | ||||
| 
 | ||||
| > how the current config was set up https://www.youtube.com/watch?v=G5f6GC7SnhU | ||||
| 
 | ||||
| > look into this? `https://technotim.live/posts/rotate-sops-encryption-keys/` | ||||
| 
 | ||||
| > something about ssh keys for remotes | ||||
| 
 | ||||
| # Notes: | ||||
| - Look into this for fixing nixos-anywhere `https://github.com/lucidph3nx/nixos-config/tree/main` | ||||
| - Look into this for rotating sops keys `https://technotim.live/posts/rotate-sops-encryption-keys/` | ||||
| - Look into this for openssh known configurations https://search.nixos.org/options?channel=unstable&from=0&size=15&sort=alpha_asc&type=packages&query=services.openssh | ||||
| - Look into this for flake templates https://nix.dev/manual/nix/2.22/command-ref/new-cli/nix3-flake-init | ||||
| 
 | ||||
| # Updating | ||||
| `nix flake update` | ||||
| 
 | ||||
| # Tasks: | ||||
| 
 | ||||
| ## Tech Debt | ||||
| - allowUnfree should be dynamically enabled by the users whenever they need them | ||||
| - allowUnfree should be dynamically enabled by the users whenever they need them (this isnt enabled at all right now for some reason???) | ||||
| - GNOME default monitors per hardware configuration? | ||||
| - graphics driver things should prob be in the hardware-configuration.nix | ||||
| - what does `boot.kernelModules = [ "sg" ]` do? | ||||
|  | @ -45,11 +51,12 @@ TODO: keys.txt should prob be readable by owning user only? | |||
| - DISKO for server | ||||
| - STOP FROM SLEEPING | ||||
| - VS code extensions should be installed declaratively | ||||
| - Flake templates - https://nix.dev/manual/nix/2.22/command-ref/new-cli/nix3-flake-init | ||||
| - Flake templates | ||||
| - Install all the things on the NAS | ||||
| - firefox declarative??? | ||||
| - figure out steam vr things? | ||||
| - Open GL? | ||||
| - util functions | ||||
| - openssh known hosts https://search.nixos.org/options?channel=unstable&from=0&size=15&sort=alpha_asc&type=packages&query=services.openssh | ||||
| - limit boot configurations to 2 on defiant | ||||
| - openssh known hosts | ||||
| - limit boot configurations to 2 on defiant | ||||
| - rotate sops encryption keys | ||||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue