Skip to content

Commit 49ed2d7

Browse files
committed
new: Add README.md
1 parent ee3905b commit 49ed2d7

File tree

1 file changed

+27
-0
lines changed

1 file changed

+27
-0
lines changed

README.md

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
# jorgearaya.dev
2+
3+
This repository has my professional blog and the Nix files that configures the server on Digital Ocean.
4+
5+
## Notes
6+
7+
How to make a new Digital Ocean image:
8+
9+
```sh
10+
nix build .#digital-ocean
11+
```
12+
13+
How to rebuild the OS of the remote server:
14+
15+
```sh
16+
nix run github:serokell/deploy-rs .#site
17+
```
18+
19+
### Secrets
20+
21+
Secrets are provided with this repository and installed after Digital Ocean has created the droplet. They cannot be installed on the Digital Ocean image on creation (AFAIK) thus we need to ssh into the server and generate the AGE key from the public SSH key of the system.
22+
23+
```sh
24+
$ nix-shell -p ssh-to-age --run 'cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age'
25+
```
26+
27+
After getting the AGE key, we have to update `.sops.yaml` and run `sops updatekeys` for the `secrets.yaml` file.

0 commit comments

Comments
 (0)