|
3 years ago | |
---|---|---|
common | 3 years ago | |
hosts | 3 years ago | |
lib | 3 years ago | |
modules | 3 years ago | |
secrets | 3 years ago | |
README.md | 3 years ago | |
deploy.sh | 3 years ago | |
flake.lock | 3 years ago | |
flake.nix | 3 years ago |
README.md
Colmena NixOS Config Template
- user gpg-keys (for them to be able to decrypt the secrets):
secrets/.gpg-id
- collect/generate host gpg-keys:
./lib/create-keys.sh
- edit stuff in password store:
./lib/pass.sh
How to deploy
./deploy.sh apply switch --on vpn7
or to deploy all gateways (all hosts with the gateway-tag):
./deploy.sh apply switch --on gateway
There is a special case for the nixdeploy-host:
./deploy.sh apply-local --node nixdeploy