My homelab #

Deploy #

All nodes

nix run

Specific node

nix run . -- .#cm4-node-1

Build #

Build every node's system closure and pin it in .gcroots/, so a store gc doesn't force re-downloading the aarch64 closures on the next deploy.

nix run .#build-all

Single node

nix run .#build-all -- rk1-node-2

Secrets #

nix run .#sops -- secrets/file