Look over the commands in an install.sh and execute them one by one. To decrypt secrets follow the following rough instructions:
- Copy over
/etc/ssh/ssh_host_*to/state/etc/ssh/ssh_host_* - Add the
/etc/ssh/ssh_host_ed25519_key.pubkey and ip address tonix/hosts.nix - Generate password with
mkpasswd -m sha-512and make a secret withagenix -e my/path/to/secret - Rekey all secrets with
agenix -r
nixos-install --no-root-password
You can also use deploy-rs to deploy remotely.