config-manager
./config-manager is a module that contains a script to make usage of this flake easier.
To install it first add the module to the nixOS system connfiguration and then
run nixos-rebuild switch --flake .#<configuration>, after that cm will be available on $PATH.
Secrets
Secrets are managed by agenix (https://github.com/ryantm/agenix).
Creating new secrets
-
Update
secrets/secrets.nixwith the new secret. -
When inside
./secrets:
EDITOR=vim agenix -e "some-secret.age"
This will create a new secret. To view its content one can do:
EDITOR=vim agenix -d "some-secret.age" -i ~/.ssh/alex.pinwheel
Or use some other SSH key that is has been used to key the secret.