Here you can find our infrastructure. One day we might find time to actually document it.
- Install macOS and update to latest version
- Generate host ssh key using
sudo ssh-keygen -Aaddingage.identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];todarwin-configuration.nixand host key tosecretsrepo. - Run nix installer:
curl -fsSL https://install.determinate.systems/nix | sh -s — install --prefer-upstream-nix - Optional: Manually create nix-ssh user on macOS, does not need to be system
- Install configuration using nix-darwin:
sudo nix run nix-darwin/master#darwin-rebuild -- switch --flake <path to flake> - Run
tailscale up --ssh, login, disable key expiry and optionally add machine to builders/github-actions tags