chayleaf/dotfiles
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
dotfiles/update.sh

16 lines
728 B
Bash
Raw Normal View History

add readme, calendar, etc
2023-02-21 05:20:19 +07:00
#!/usr/bin/env bash
refactor pkgs, allow NixOS HM module to be used
2023-05-25 06:24:57 +07:00
cp ~/.config/nixpkgs/overlays.nix ./overlays.nix || (mkdir -p ~/.config/nixpkgs && cp ./overlays.nix ~/.config/nixpkgs)
merge into a single flake However, Nix has some annoying store semantics when integrating with .git repos, so I move .git to .git.bak whenever I'm not working with git.
2023-05-25 04:39:57 +07:00
nvfetcher \
refactor pkgs, allow NixOS HM module to be used
2023-05-25 06:24:57 +07:00
-o ./pkgs/_sources \
-c ./pkgs/nvfetcher.toml || echo "failed to update nvfetcher sources"
merge into a single flake However, Nix has some annoying store semantics when integrating with .git repos, so I move .git to .git.bak whenever I'm not working with git.
2023-05-25 04:39:57 +07:00
mozilla-addons-to-nix \
refactor pkgs, allow NixOS HM module to be used
2023-05-25 06:24:57 +07:00
./pkgs/firefox-addons/addons.json \
./pkgs/firefox-addons/generated.nix || echo "failed to update firefox addons"
store secrets separate from this flake This uses a native plugin (pkgs.nix-plugins) to avoid using --impure, other options involving secret files are too limited for my use case as I need eval-time access to secrets. Moving it to a private flake is another option, but Nix flakes are poorly suited for non-monorepos. Previously I just renamed .git to .git.bak to make sure Nix pulls the "private" subdir into store as well, but this new system may be more robust and can be extended to way be more secure in the future (e.g. right now I copy the secret .nix files to store, but in general there's no need to do that). Of course the main drawback is that now I require a plugin for this flake to work.
2023-05-26 00:40:31 +07:00
nix flake update
refactor pkgs, allow NixOS HM module to be used
2023-05-25 06:24:57 +07:00
if [ -z ${SUDO_ASKPASS+x} ]; then
store secrets separate from this flake This uses a native plugin (pkgs.nix-plugins) to avoid using --impure, other options involving secret files are too limited for my use case as I need eval-time access to secrets. Moving it to a private flake is another option, but Nix flakes are poorly suited for non-monorepos. Previously I just renamed .git to .git.bak to make sure Nix pulls the "private" subdir into store as well, but this new system may be more robust and can be extended to way be more secure in the future (e.g. right now I copy the secret .nix files to store, but in general there's no need to do that). Of course the main drawback is that now I require a plugin for this flake to work.
2023-05-26 00:40:31 +07:00
sudo nixos-rebuild switch --flake . --option extra-builtins-file "$(pwd)/extra-builtins.nix"
refactor pkgs, allow NixOS HM module to be used
2023-05-25 06:24:57 +07:00
else
store secrets separate from this flake This uses a native plugin (pkgs.nix-plugins) to avoid using --impure, other options involving secret files are too limited for my use case as I need eval-time access to secrets. Moving it to a private flake is another option, but Nix flakes are poorly suited for non-monorepos. Previously I just renamed .git to .git.bak to make sure Nix pulls the "private" subdir into store as well, but this new system may be more robust and can be extended to way be more secure in the future (e.g. right now I copy the secret .nix files to store, but in general there's no need to do that). Of course the main drawback is that now I require a plugin for this flake to work.
2023-05-26 00:40:31 +07:00
sudo -A nixos-rebuild switch --flake . --option extra-builtins-file "$(pwd)/extra-builtins.nix"
refactor pkgs, allow NixOS HM module to be used
2023-05-25 06:24:57 +07:00
fi
store secrets separate from this flake This uses a native plugin (pkgs.nix-plugins) to avoid using --impure, other options involving secret files are too limited for my use case as I need eval-time access to secrets. Moving it to a private flake is another option, but Nix flakes are poorly suited for non-monorepos. Previously I just renamed .git to .git.bak to make sure Nix pulls the "private" subdir into store as well, but this new system may be more robust and can be extended to way be more secure in the future (e.g. right now I copy the secret .nix files to store, but in general there's no need to do that). Of course the main drawback is that now I require a plugin for this flake to work.
2023-05-26 00:40:31 +07:00
home-manager switch --flake . --option extra-builtins-file "$(pwd)/extra-builtins.nix"
Reference in a new issue Copy permalink