treewide: format markdown
All checks were successful
Check flake / build-amd64-linux (push) Successful in 1m18s
All checks were successful
Check flake / build-amd64-linux (push) Successful in 1m18s
This commit is contained in:
@@ -10,10 +10,12 @@ System and user configuration for NixOS-based systems.
|
||||
| **Terminal:** | Ghostty |
|
||||
|
||||
## Provisioning a new host
|
||||
|
||||
> [nixos-anywhere](https://github.com/nix-community/nixos-anywhere) is the module used
|
||||
> for provisioning
|
||||
|
||||
Generate a new SSH host key in "$temp/etc/ssh" as per [this guide](https://nix-community.github.io/nixos-anywhere/howtos/secrets.html#example-decrypting-an-openssh-host-key-with-pass).
|
||||
|
||||
```
|
||||
ssh-keygen -t ed25519 -f /tmp/ssh_host_ed25519_key
|
||||
```
|
||||
@@ -29,6 +31,7 @@ Create a new directory under `hosts/` with a system configuration and disk layou
|
||||
Boot the NixOS installer (or any Linux distribution) on the target.
|
||||
|
||||
Then run:
|
||||
|
||||
```
|
||||
nix run github:nix-community/nixos-anywhere -- \
|
||||
--disk-encryption-keys /tmp/secret.key /tmp/secret.key \
|
||||
@@ -40,15 +43,19 @@ nix run github:nix-community/nixos-anywhere -- \
|
||||
### Post install
|
||||
|
||||
If backups are configured, you'll need to run:
|
||||
|
||||
```
|
||||
borgmatic init --encryption repokey-blake2
|
||||
```
|
||||
|
||||
then restart `borgmatic`.
|
||||
|
||||
To join the Tailscale network, run:
|
||||
|
||||
```
|
||||
tailscale up --login-server https://headscale.vimium.net
|
||||
```
|
||||
|
||||
then visit the URL, SSH onto `vps1` and run `headscale --user mesh nodes register --key <key>`.
|
||||
|
||||
The new node can optionally be given a friendly name with `headscale node rename -i <index> <hostname>`.
|
||||
|
Reference in New Issue
Block a user