My dotfiles

• Quick start for home-manger only (no need to pull this repo)
• Machine selection
• Manual symlinks
• Secrets management with sops
  • Edit secrets
  • Authorize new device
• Installation of builder

Quick start for home-manger only (no need to pull this repo)

• Install nix using the https://github.com/DeterminateSystems/nix-installer

• Then run

  nix run nixpkgs#home-manager -- switch --flake git+https://gitlab.julian-mutter.de/julian/dotfiles.git#julian@quickstart

• Done

Machine selection

home-manager automatically searches for user or user@hostname config in the flake, so specify one of those or you will have to manually specify them: home-manager switch --flake .#user@hostname

Manual symlinks

laptop-nix.conf was manually symlinked to file:/etc/nix/nix.conf and flake.nix was symlinked to file:~/.config/home-manager/flake.nix

For deployment!!

Secrets management with sops

Full documentation here: https://github.com/Mic92/sops-nix

Edit secrets

sops edit secrets/secrets.yaml

Authorize new device

• Generate public key from ssh -> Private age key generation not needed

ssh-to-age < /etc/ssh/ssh_host_ed25519_key.pub

• Add age public key to file:.sops.yaml
• Update keys

sops updatekeys secrets/*

Installation of builder

• Start recent nixos installer in VM
• Set password for root

nix run github:nix-community/nixos-anywhere -- --flake git+https://gitlab.julian-mutter.de/julian/dotfiles.git#builder --target-host root@<ip>