+remmina -tigervnc

README.md

@@ -71,8 +71,8 @@ Private hosts are stored encrypted in `hosts/la2410/secrets.yaml`, decrypted wit
 Edit them:
 
 ```bash
-doas env SOPS_AGE_KEY_CMD="nix run nixpkgs#ssh-to-age -- -private-key -i /etc/ssh/ssh_host_ed25519_key" \
+doas env SOPS_AGE_KEY_CMD="ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key" \
-  nix run nixpkgs#sops -- hosts/la2410/secrets.yaml
+  sops hosts/la2410/secrets.yaml
 ```
 
 Add lines under `private-hosts: |`, save, then rebuild.
@@ -80,8 +80,8 @@ Add lines under `private-hosts: |`, save, then rebuild.
 If the SSH host key ever changes (reinstall), get the new age key, put it in `.sops.yaml`, and re-encrypt with the old key still available:
 
 ```bash
-nix run nixpkgs#ssh-to-age -- -i /etc/ssh/ssh_host_ed25519_key.pub
+ssh-to-age -i /etc/ssh/ssh_host_ed25519_key.pub
-doas env SOPS_AGE_KEY_CMD="..." nix run nixpkgs#sops -- updatekeys hosts/la2410/secrets.yaml
+doas env SOPS_AGE_KEY_CMD="..." sops updatekeys hosts/la2410/secrets.yaml
 ```
 
 ## Debugging a failed build

home/packages.nix

@@ -13,7 +13,7 @@
     httptoolkit
     libreoffice
     anydesk
-    tigervnc
+    remmina
     ffmpeg
     jdk25
     feh

hosts/la2410/configuration.nix

@@ -182,6 +182,8 @@ hardware.i2c.enable = true;
     speedtest-cli
     android-studio
     gnupg
+    sops # edit hosts/la2410/secrets.yaml, see README
+    ssh-to-age
     pinentry-curses
     imagemagick
     tree