173
Three Years of Nix and NixOS: The Good, the Bad, and the Ugly (pierrezemb.fr)
submitted 1 year ago by to c/linux@lemmy.ml
81 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 1 year ago (10 children)

Copy one file over and it’s set up for you.

So, I've only played around with NixOS on a Raspberry Pi, but... Don't people usually split their config up in multiple files, and then store than in a Git repository?

The process then still is: check out that Git repository, except there's another step: copy over your private key so that you can decrypt your secrets.

Is that correct? Or did I make things needlessly complex for myself?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 1 point 1 year ago (3 children)

    Way over complex lol. I don't copy anything to online source for better or worse. I auto script backups. The only backups you'll ever need are nix config. Nothing else aside from your home folder obviously. With those two you can boot on any machine, anytime, as if you never left. I am not shilling. It's been dead stable so far, aside from tweaks I done to break my own builds testing.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 1 year ago (2 children)

    Hmm yeah, I guess the question is: is it overly complex if I do want to store my backup of my Nix config online, version-controlled, preferably publicly?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 1 year ago (3 children)

    The process then still is: check out that Git repository, except there’s another step: copy over your private key so that you can decrypt your secrets.

    I store my secrets in a separate private git repo and automatically decrypt them with my hardware key (https://github.com/balsoft/nixos-config/blob/master/modules/secrets.nix) so for me it's literally just plug in my yubikey and nixos-install github:balsoft/nixos-config#hostname

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 1 year ago (2 children)

    How do you access the private Git repo then? Don't you need a secret to access it?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 1 year ago (1 child)

    I don’t have any secrets in my config or a private key or anything and I’m currently running 4 servers from the same config (it used to be 8 or even more machines at some point even, including desktops).

    But yes, it’s a multi-file config, it would be absolutely crazy to not split it up with how large it is.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •