From 6e02f3ff5f106e08c24e81b0806d9c7d7e66e7d4 Mon Sep 17 00:00:00 2001 From: Shihaam Abdul Rahman Date: Mon, 19 Oct 2026 23:45:49 +0500 Subject: [PATCH] +remmina -tigervnc --- README.md | 8 ++++---- home/packages.nix | 2 +- hosts/la2410/configuration.nix | 2 ++ 3 files changed, 7 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 62f42b1..eb348de 100644 --- a/README.md +++ b/README.md @@ -71,8 +71,8 @@ Private hosts are stored encrypted in `hosts/la2410/secrets.yaml`, decrypted wit Edit them: ```bash -doas env SOPS_AGE_KEY_CMD="nix run nixpkgs#ssh-to-age -- -private-key -i /etc/ssh/ssh_host_ed25519_key" \ - nix run nixpkgs#sops -- hosts/la2410/secrets.yaml +doas env SOPS_AGE_KEY_CMD="ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key" \ + sops hosts/la2410/secrets.yaml ``` Add lines under `private-hosts: |`, save, then rebuild. @@ -80,8 +80,8 @@ Add lines under `private-hosts: |`, save, then rebuild. If the SSH host key ever changes (reinstall), get the new age key, put it in `.sops.yaml`, and re-encrypt with the old key still available: ```bash -nix run nixpkgs#ssh-to-age -- -i /etc/ssh/ssh_host_ed25519_key.pub -doas env SOPS_AGE_KEY_CMD="..." nix run nixpkgs#sops -- updatekeys hosts/la2410/secrets.yaml +ssh-to-age -i /etc/ssh/ssh_host_ed25519_key.pub +doas env SOPS_AGE_KEY_CMD="..." sops updatekeys hosts/la2410/secrets.yaml ``` ## Debugging a failed build diff --git a/home/packages.nix b/home/packages.nix index 55c69b5..c9c378c 100644 --- a/home/packages.nix +++ b/home/packages.nix @@ -13,7 +13,7 @@ httptoolkit libreoffice anydesk - tigervnc + remmina ffmpeg jdk25 feh diff --git a/hosts/la2410/configuration.nix b/hosts/la2410/configuration.nix index a7fc2b2..4c53fe3 100644 --- a/hosts/la2410/configuration.nix +++ b/hosts/la2410/configuration.nix @@ -182,6 +182,8 @@ hardware.i2c.enable = true; speedtest-cli android-studio gnupg + sops # edit hosts/la2410/secrets.yaml, see README + ssh-to-age pinentry-curses imagemagick tree