store signing keys for nodens #86

Merged
nerf merged 2 commits from nerf/nixConfig:nodens-deploy into main 2025-06-22 18:39:11 +00:00
Showing only changes of commit 61d95f1b23 - Show all commits

View file

@ -82,6 +82,10 @@ is exactly the same it was on your machine.
If you have a `nixos-rebuild` available on your system, it can automatize these things with the `--flake` and
`--target-host` parameters. But there are some pitfalls so look at the `nixos-rebuild` documentation beforehand.
### On nodens
You can build the machine on `nodens` the same way you would build it on your local machine. On `nodens` there
is a key trusted by all machines at `/run/secrets/nodens-deploy.key`, to sign your build.
### On the machine
Clone this repository to `/etc/nixos/` and `nixos-rebuild boot` or `nixos-rebuild switch` that will select