nixos

Archived

This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

T

History

rootandClaude Sonnet 5 cafeb8853b

Check NixOS configurations / eval-hosts (pull_request) Failing after 11m15s

Details

Add scripts/rotate-admin-key.sh to automate sops admin key rotation

Automates the manual steps sync-host-keys.sh/create-proxmox-resource.sh
print when they bootstrap a fresh, not-yet-trusted age key: verifies a
backed-up key matches the current &admin entry, swaps in a new key, and
re-encrypts every secrets/*.yaml. Explicitly cds into repo_root before any
sops call, since sops resolves .sops.yaml by walking up from cwd rather
than from the target file's path -- confirmed via a scratch-repo test that
running from elsewhere would otherwise silently rotate against the wrong
config.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-20 11:23:33 +00:00

lib

Add sync-host-keys.sh and create-proxmox-resource.sh

2026-07-20 10:31:06 +10:00

bump-nixpkgs-release.sh

Add scripts/bump-nixpkgs-release.sh

2026-07-20 08:04:44 +10:00

codex-maintenance.sh

Remove packages.all bundle and the installer's own proxmox-lxc target

2026-07-20 08:04:08 +10:00

codex-setup.sh

Migrate live secrets to sops-nix (Milestone 2)