Nix based configuration for my machines.
- Install Nix using the Nix Installer.
- Clone this repository into
~/dotfiles(on MacOS install the command line tools when prompted, as git is not installed on a fresh MacOS installation). - Run
nix buildfor the machine to provision. - Run
darwin-rebuild switch --flake . - After the first run just run the aliased commands to switch the configuration.
Secrets are encrypted using agenix.
To create a new secret, add first an entry to secrets/secrets.nix, declaring which public key should be used to encrypt the secret. Then run:
RULES=secrets/secrets.nix agenix -e NEW_SECRET.age && mv NEW_SECRET.age secrets/
An editor will open, write the secrets content then save and quit.
Declare the secret in the configuration using:
age.secrets = {
secret = {file = PATH_TO_SECRETS/SECRET.age;};
};
Use the secret with:
config.age.secrets.SECRET.path;
The provisioners/ folder contains provision scripts for some hosts using Nixos.
Those scripts are intended to be run once and are able to partition and then install a minimal system with remote root ssh access.
Further generations of those systems are deployed with deploy-rs and the flake in this project.