efa1fb0c07
- .gitattributes declares secrets/** covered by git-crypt filter - New symmetric key at $HOME/.nixos-git-crypt.key (chmod 400, not committed) - All 36 files under secrets/ re-encrypted via the clean filter on 'git add': - 5 files in secrets/desktop/ (wifi, secureboot, disk pw, cache netrc, hash) - 3 files in secrets/home/ (hm api keys + steam id) - 26 files in secrets/server/ (.age + .nix + .tar + livekit_keys) - 2 files in secrets/usb-secrets/ (agenix identity) 'git-crypt status' confirms 36 encrypted, 150 non-encrypted. Old git-crypt keys from the two subtree-merged repos are in the historical subtree commits (pre-Phase 2). To decrypt pre-unify history one still needs the old GPG-encrypted keys, which survive at: ~/nixos-migration-aux-*.tar.gz
nixos
Unified NixOS flake for three hosts:
- mreow — Framework 13 AMD AI 300 laptop (nixos-unstable)
- yarn — AMD Zen 5 desktop with Jovian-NixOS Steam mode (nixos-unstable, pull-based updates)
- muffin — AMD Zen 3 server (nixos-25.11, deploy-rs, agenix, ZFS, Caddy + services)
This repository was created by merging the histories of dotfiles (mreow, yarn) and server-config (muffin)
via git subtree add. See git log --follow <file> to trace any file across the merge.
See AGENTS.md for development conventions.