My NIXOS Configuration

Setup all my devices using nixos (WIP)

General Setup

I use nix-sops

nix-shell -p sops --run "sops secrets/secrets.yaml"
nix-shell -p spos --run 'sops updatekeys secrets/secrets.yaml'

Setup remote system

1. Boot system in live mode

2. Use nixos-anywhere

   nix run github:nix-community/nixos-anywhere -- \
    --flake ".#FLAKE" \
   <[email protected]>
   

3. Install/Update system using colmena

   colmena apply --on lenovo,envy
   

4. Add host key to .spps.yaml

5. Update secrets

sops updatekeys profiles/servers/secrets.yaml
sops updatekeys secrets/secrets.yaml
...

Alternatively you can also run:

sudo -E nixos-rebuild switch --flake '.#envy' \
  --upgrade --target-host \
  [email protected] --sudo

If there is a problem with ssh, you can specify the key to use:

NIX_SSHOPTS="-i /home/papanito/.ssh/[email protected]"

Raspberry PI

Follows https://github.com/nvmd/nixos-raspberrypi?tab=readme-ov-file

1. Build image

nix build '.#nixosConfigurations.rpi4-demo.config.system.build.sdImage'

2. Unzstd image

unzstd result/sd-image/nixos-sd-image-rpi4-uboot.img.zst -o nixos-sd-image-rpi4-uboot.img

3. Burn it to sdcard

sudo dd if=nixos-sd-image-rpi4-uboot.img of=/dev/sda bs=4M status=progress