Valentin Brandl
435f13f76a
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/c718918222bdb104397762dea67e6b397a7927fe?narHash=sha256-5dn97vIYxn6VozKePOQSDxVCsrl38nDdMJXx86KIJH0%3D' (2025-07-17)
→ 'github:nix-community/home-manager/fc3add429f21450359369af74c2375cb34a2d204?narHash=sha256-oV695RvbAE4%2BR9pcsT9shmp6zE/%2BIZe6evHWX63f2Qg%3D' (2025-07-27)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/32a4e87942101f1c9f9865e04dc3ddb175f5f32e?narHash=sha256-f3pO%2B9lg66mV7IMmmIqG4PL3223TYMlnlw%2Bpnpelbss%3D' (2025-07-15)
→ 'github:nixos/nixpkgs/3ff0e34b1383648053bba8ed03f201d3466f90c9?narHash=sha256-CdX2Rtvp5I8HGu9swBmYuq%2BILwRxpXdJwlpg8jvN4tU%3D' (2025-07-24)
• Updated input 'nixpkgs-unstable':
'github:nixos/nixpkgs/6e987485eb2c77e5dcc5af4e3c70843711ef9251?narHash=sha256-RKwfXA4OZROjBTQAl9WOZQFm7L8Bo93FQwSJpAiSRvo%3D' (2025-07-16)
→ 'github:nixos/nixpkgs/7fd36ee82c0275fb545775cc5e4d30542899511d?narHash=sha256-9h7%2B4/53cSfQ/uA3pSvCaBepmZaz/dLlLVJnbQ%2BSJjk%3D' (2025-07-25)
NixOS Configuration
Now using Flakes \o/
Updating Channels/the Lockfile
nix flake lock
nix flake update
Installing/Updating the System
sudo nixos-rebuild switch --flake <path-to-repo>#<hostname>
sudo nixos-rebuild switch --flake .#w1n5t0n
Mail Setup
secret-tool store --label 'foo@example.com' email 'foo@example.com'
Encrypted Btrfs Setup
- cryptsetup luksFormat --format=luks1 /...
- cryptsetup luksOpen /... system
- mkfs.btrfs /dev/mapper/system
- mount /dev/mapper/system /mnt
- btrfs subvolume create /mnt/root
- btrfs subvolume create /mnt/home
- btrfs subvolume create /mnt/nix
- btrfs subvolume create /mnt/swap
| subvolume | mount options |
|---|---|
home |
compress=zstd |
swap |
compress=zstd,noatime |
root |
compress=zstd |
nix |
compress=zstd,noatime |
/boot/efias vfat TODO: partitioning command- TODO: create swap
- mount subvolumes
- `nixos-generate-config --root /mnt
- add mount options in
hardware-configuration.nix/ create matching configuration in./machines - TODO: config for luks, bootloader, ...
- For
snapper: create.snapshotssubvolume in each subvolume to be backed up