DannyDannyDanny b0c8664f5c docs: update stale dotfiles/nixos flake paths 📝

Stage 4f cleanup. The flake moved from ~/dotfiles/nixos/ to ~/dotfiles/
in 88c5139; docs and install scripts hadn't been refreshed. Point all
rebuild / flake references at the new root:

- AGENTS.md, README.md, server-quickstart.md, docs/server-installer-usb.md,
  docs/sunken-ship-wifi.md, nixos/readme.md — rebuild command paths.
- scripts/nixos-server-install.sh — auto-detect now looks for flake.nix
  at repo root (was nixos/flake.nix).
- scripts/post-install-provision.sh — first-rebuild hint path.

`nixos/hosts/<host>-hardware.nix` and friends stay where they are —
host-specific NixOS modules still live under nixos/; only the flake
entry-points + sops/ + vars/ + lib/ + modules/ + flake-modules/ moved.

nixos/readme.md rewritten to reflect the split (flake at root, per-host
modules under nixos/).

2026-04-20 20:28:05 +02:00

4.4 KiB

Raw Blame History

Server installer USB (NixOS + LUKS)

Bootable USB that installs NixOS on a new server with disk encryption (LUKS). The install script handles partitioning, encryption, dotfiles cloning, SSH key setup, and hardware config generation. Only required inputs: hostname, LUKS passphrase, and target disk.

Quick path (Ethernet server like phantom-ship)

Prep (on sunken-ship or any Linux box)

Download the NixOS minimal ISO on sunken-ship.

Plug in USB and write the ISO:

# Find your USB device (e.g. /dev/sdc)
lsblk
sudo dd if=nixos-minimal-*.iso of=/dev/sdX status=progress bs=4M
sync

Install (on the new server)

Boot the new machine from USB, plug in Ethernet, verify connectivity (ping 8.8.8.8).

Start SSH on the live system so you can paste commands from your Mac:

sudo systemctl start sshd
sudo passwd nixos
hostname -I   # note the IP

From your Mac, scp your SSH public key and SSH in:

scp ~/.ssh/id_ed25519_phantom_ship.pub nixos@<IP>:/tmp/key.pub
ssh nixos@<IP>

Run the bootstrap (one command):
```
curl -sL https://raw.githubusercontent.com/DannyDannyDanny/dotfiles/main/scripts/bootstrap-install.sh | \
  INSTALLER_HOSTNAME=phantom-ship SSH_PUBKEY_FILE=/tmp/key.pub sudo -E bash
```
This will prompt for: target disk, optional danny password, confirmation, and LUKS passphrase (twice: once for disko, once for post-install provisioning).

The script automatically:
- Partitions and encrypts the disk (LUKS + ext4)
- Installs NixOS with the hostname
- Clones dotfiles to /etc/dotfiles
- Installs your SSH public key
- Generates phantom-ship-hardware.nix
Reboot, remove USB, unlock LUKS.

After first boot

SSH in: ssh danny@phantom-ship

First rebuild to switch from generic server-install to phantom-ship config:

cd /etc/dotfiles && sudo nixos-rebuild switch --flake .#phantom-ship

Commit the generated phantom-ship-hardware.nix back to the repo.

Environment variables

All optional; skip interactive prompts or add automation:

Variable	Description
`INSTALLER_HOSTNAME`	Skip hostname prompt
`INSTALLER_DISK`	Skip disk prompt (validated as block device)
`SSH_PUBKEY_FILE`	Path to `.pub` file; installed to danny's `authorized_keys`
`FLAKE_REF`	Override flake reference (default: auto-detect from repo)
`INSTALLER_SYSTEM_CONFIG_FILE`	JSON file merged into `--system-config` (e.g. WiFi config)

Option A: Official NixOS ISO (recommended)

Cannot build the custom ISO on macOS (x86_64-linux only). Use the official NixOS minimal ISO:

Download from nixos.org.
Write to USB from sunken-ship or any Linux box.
Boot, connect Ethernet, run bootstrap.

Option B: Custom ISO (build on Linux only)

Adds WiFi kernel modules for servers that need WiFi on the live system.

Build from sunken-ship

./scripts/build-installer-iso-on-server.sh

Build directly on Linux

cd ~/dotfiles && nix build .#installer-iso
# Write to USB:
sudo dd if=result/iso/nixos-minimal-*.iso of=/dev/sdX status=progress bs=4M

Live-system WiFi (optional, custom ISO only)

Create nixos/installer-wifi.nix (gitignored):

{
  networking.wireless.enable = true;
  networking.wireless.networks."YourSSID".psk = "your-password";
}

Add to flake's installer-iso modules, rebuild ISO on Linux.

Installed-system WiFi (optional)

Pass a JSON file with wireless config:

sudo INSTALLER_SYSTEM_CONFIG_FILE=/path/to/wifi.json INSTALLER_HOSTNAME=my-server ./scripts/nixos-server-install.sh

Manual install (without the script)

sudo nix run github:nix-community/disko/latest#disko-install -- \
  --flake 'path:/tmp/dotfiles#server-install' \
  --disk main /dev/sda \
  --system-config '{"networking":{"hostName":"my-server"}}'

Summary

Step	Action
Prep	Download NixOS minimal ISO on sunken-ship, write to USB
Boot	Boot new server from USB, plug Ethernet
Install	`curl ... \| INSTALLER_HOSTNAME=phantom-ship SSH_PUBKEY_FILE=/tmp/key.pub sudo -E bash`
Reboot	Remove USB, unlock LUKS
First rebuild	`sudo nixos-rebuild switch --flake /etc/dotfiles#phantom-ship`
Commit	Push generated `phantom-ship-hardware.nix` to repo

4.4 KiB Raw Blame History