n0emis 0dd7fb7ac0
Initial commit
common Initial commit
hosts Initial commit
lib Initial commit
modules Initial commit
secrets Initial commit
README.md Initial commit
deploy.sh Initial commit
flake.lock Initial commit
flake.nix Initial commit

README.md

Colmena NixOS Config Template

  • user gpg-keys (for them to be able to decrypt the secrets): secrets/.gpg-id
  • collect/generate host gpg-keys: ./lib/create-keys.sh
  • edit stuff in password store: ./lib/pass.sh

How to deploy

./deploy.sh apply switch --on vpn7

or to deploy all gateways (all hosts with the gateway-tag):

./deploy.sh apply switch --on gateway

There is a special case for the nixdeploy-host:

./deploy.sh apply-local --node nixdeploy