colmena_flags := "-v"

@just --choose

build host:

colmena build --on={{ host }} {{ colmena_flags }}

colmena build {{ colmena_flags }}

apply host:

colmena apply --on={{ host }} {{ colmena_flags }}

colmena apply

nix flake check --impure --all-systems

nix repl --extra-experimental-features repl-flake .#

nix fmt

statix check . && deadnix .

age-from-host host:

nix shell nixpkgs#ssh-to-age --command sh -c "ssh-keyscan {{ host }} | ssh-to-age"

find . -regextype egrep -regex '^.*secrets\.(json|yml)' -execdir sops updatekeys {} -y ';'

nixos-anywhere hostname host:

nixos-anywhere --flake .#{{ hostname }} --build-on-remote root@{{ host }}

nix run .#generate-ci

ansible playbook:

ansible-playbook -i deploy/ansible/inventory.yml deploy/ansible/{{ playbook }}.yml

ssh host:

ssh -F $SSH_CONFIG_FILE root@{{ host }}

mosh host:

mosh --ssh="ssh -F $SSH_CONFIG_FILE" root@{{ host }}

scp *args:

scp -F $SSH_CONFIG_FILE {{ args }}

rsync *args:

rsync -e "ssh -F $SSH_CONFIG_FILE" {{ args }}

rsync -rtu --delete --progress -e "ssh -F $SSH_CONFIG_FILE" ~/Documents/e10.land/ matrix:/var/www/e10.land/

image name:

nom build .#packages.x86_64-linux.{{ name }}-image

terraform *args:

terraform -chdir=./deploy/terraform/ {{ args }}

edit-secret file:

EDITOR="zeditor --wait" sops {{ file }}

cachix push e10 result

attic push e10 result

authelia crypto rand --length 72 --charset rfc3986

authelia crypto hash generate pbkdf2 --variant sha512 --random --random.length 72 --random.charset rfc3986

alias fmt := format