- Clone repo with git.
- Make sure you're running Nix 2.4+, and opt into the experimental
flakes
andnix-command
features:
# Should be 2.4+
nix --version
export NIX_CONFIG="experimental-features = nix-command flakes"
- Run
sudo nixos-rebuild switch --flake .#hostname
to apply your system configuration.- If you're still on a live installation medium, run
nixos-install --flake .#hostname
instead, and reboot.
- If you're still on a live installation medium, run
- Run
home-manager switch --flake .#username@hostname
to apply your home configuration.- If you don't have home-manager installed, try
nix shell nixpkgs#home-manager
.
- If you don't have home-manager installed, try
- YubiKey setup, inside of
nix shell nixpkgs#pam_u2f
run:mkdir -p ~/.config/Yubico
pamu2fcfg > ~/.config/Yubico/u2f_keys
- If you want to add another YubiKey, run
pamu2fcfg -n >> ~/.config/Yubico/u2f_keys
- If you want to add another YubiKey, run
There are advanced options for secret management, including some that can include them (encrypted) into your config repo and/or nix store, be sure to check them out if you're interested.