34fe86060c
Remember to add IPV4 addresses in pihole for subhosts. This is because their namecheap DNS entries point to the router, so will resolve to our external IP. For IPV6, the addresses point straight to the server, so no additional steps are needed.
NixOS configurations
This repo holds my settings for a laptop and a home server, along with a shared user config that is present on each machine.
To update system.
Run nixos-rebuild switch --flake .#
You can specify the name of the system to use if you don't have it set up yet, for example:
nixos-rebuild switch --flake .#buck
Secrets
We use sops-nix. All secrets are in secrets.yaml. Follow the instructions to add new machines in order to edit secrets, then use sops secrets.yaml to view and change the secrets (from an existing machine/user that is already a recipient of the file). Note that you can use the --add-age or --add-pgp arguments to sops to add more recipients to an existing file, and that you must do this for both your editing user and the host machine if you are setting up a new machine.