steveej's infra

This repository helps me to manage all computer infrastructure. This is (mostly) achieved with the help of Nix.

In the unlikely case that you actually read this and have any questions please don't hesitate to reach out.

Left over from the initial road map

• (Re-)document bootstrap process
  • a new machine
  • an install media
• Design disaster recovery
• Automatic synchronization of other state files
• container migrations
  • ensure DDNS is updated before the containers are started

Bugs

• home-manager leaves ~/.gnupg at 0755

Usage

(These are reminders for my future self)

just --list

Bootstrap

A new machine

TBD

Post-Install Setup

• chmod --recursive g-rwx,o-rwx ~/.gnupg
• gpg2 --edit-card; fetch
• clone password-manager and infra repositories
• gpg2: ultimately trust my own key

Swapping out a disk

TBD

Rebuilding an offline system

TBD

Gotchas

Locking nixpkgs to a cached version

I wanted to lock to a specific version because Zed was failing on the latest unstable.

I looked up the latest successful build on hydra an copied the store path: https://hydra.nixos.org/build/318407157#tabs-buildinputs

Actually locking it for one device:

$ cd nix/os/devices/steveej-fw13
$ nix flake update --override-input nixpkgs-unstable /nix/store/i77jvi0qh4kddj4hraizq1j0c028q05l-source