Install

Classic

1. Flash NixOS ISO Image to an USB stick

2. Boot into it (be sure to turn off secureboot as it's not configured yet but in setup mode to be able to auto enroll key)

3. Setup wifi (if needed)

   1. Start wpa_supplicant > systemctl start wpa_supplicant

   2. Enable a wireless network > wpa_cli

      add_network 0
      set_network 0 ssid "SSID"
      set_netwwork 0 psk "PSK"
      set_network 0 key_mgmt WPA-PSK
      enable_network 0
      

4. Install NixOS

   export NIX_CONFIG="experimental-features = nix-command flakes"
   nix flake new -t github:m0nsterrr/nixos-home ./nixos-home && cd nixos-home
   sudo nix run github:nix-community/disko -- --mode disko --flake github:m0nsterrr/nixos-home#<hostname>
   # Don't forget to whitelist your USB devices on USBGuard otherwise you will not be able to login.
   sudo nixos-install --flake .#hostname

5. Reboot, login with lortega user with password temp123 and don't forget to change it !

6. GG 🥳

WSL

Install Windows Terminal and JetBrainsMono Nerd Font. Enable WSL2, download the latest NixOS release, and execute the downloaded file. Once it's installed, restart WSL with wsl --shutdown, open a new shell, and complete the installation:

sudo nix-channel --update
sudo nixos-rebuild switch

Change your username and run:

cd ~
nix-shell -p git
nix --experimental-features 'nix-command flakes' flake new -t github:m0nsterrr/nixos-home ./nixos-home
cd nixos-home
sudo nixos-rebuild switch --flake '.#wsl'

Use SSH-agent and gpg key from your windows host

Install SSH client from winget winget install "openssh beta" (it can causes error using old version) Enable ssh-agent on windows and share UserProfile and ProgramFiles env var to WSL2, open powershell prompt with admin right

Get-Service ssh-agent | Set-Service -StartupType Automatic
Start-Service ssh-agent
setx WSLENV 'ProgramFiles/up:USERPROFILE/up'

Install niperelay on windows

# Using WinGet
winget install npiperelay

# Or using Chocolatey
choco install npiperelay

# Or using a binary in %USERPROFILE%\.wsl
# for example : https://github.com/rupor-github/wsl-ssh-agent

Enable ssh agent support for OpenSSH on keepassXC

Update

If you need to update the configuration at anytime.

sudo nixos-rebuild switch --flake github:m0nsterrr/nixos-home#<hostname>

Update dependencies

nix flake update

Import static config

Import your GPG keys

gpg --import < priv.asc
gpg --import < pub.asc
gpg --import-ownertrust < trust.asc

Some static files must be manually setup :

• ~/cifs/credentials
• ~/wireguard-keys/homelab.peer
• ~/.kube/static-kubeconfigs/<files>
• ~/passwords.kdbx
• ~/.aws/credentials