Welcome to the Palace of the Earth Spirits!
- Please use alejandra as your source formatter.
- Please check for dead code paths with deadnix.
- Please use statix as your linter.
- Please use
terraform fmt
to format your Terraform work. - Please use tflint as your linter.
- Please do not merge into files by category (e.g. variables, outputs, locals).
The -s
disables flake checks.
# without trace
deploy -s .#<hostname>
# with trace
deploy -s .#<hostname> -- --show-trace
# deploy a fresh container
deploy -s .#<hostname> --hostname ct.local
sops nixos/systems/tewi/secrets.yaml
nf-sops-keyscan <hostname>
# or on a fresh container...
nf-sops-keyscan ct.local
vim .sops.yaml
for nfsecret in access nix; do sops updatekeys nixos/secrets/$nfsecret.yaml; done
nf-tf init -upgrade
nf-tarball ct