nix-config/README.md

26 lines
744 B
Markdown

# Deployment
Beide failen bei Activation des neuen Profils. (TODO)
## Mit `nixos-switch rebuild`
```shell
nixos-rebuild switch -I nixos-config=./hosts/containers/$HOST/configuration.nix --target-host "root@$HOST.hq.c3d2.de"
```
## Mit NixOps
```shell
nixops create hq.nixops -d hq
nixops deploy -d hq --check --include=dhcp
```
# Secrets
Add your gpg-id to the .gpg-id file in secrets and let somebody reencrypt it for you.
Maybe this works for you, maybe not. I did it somehow:
```PASSWORD_STORE_DIR=`pwd` tr '\n' ' ' < .gpg-id | xargs -I{} pass init {}````
Your gpg key has to have the Authenticate flag set. If not update it and push it to a keyserver and wait.
This is necessary, so you can login to any machine with your gpg key.