Custom NixOS Installer - Plug ➜ Install ➜ Play - How to achieve this?

Hi again @nicolas-goudry! :nerd_face:

Now that I’ve spent some time analyzing your (well-organized) repo, I’m having some questions :

  1. Could you explain how do you manage your keys used for SOPS? Do you have any backups of the hosts’ keys (i.e. ed25519) + age key? Per hosts?

  2. What’s your process to change passwords/secrets (i.e. users, root)? Do you edit your secrets.yaml files and run the below. If I run passwd and change the user’s password (imperatively), will it be reset on next boot, by reading the hashedPasswordFile? Same goes for wireless network passwords, will they persist (if using impermanence, are they going to be removed)?

  1. Why disable IPv6?

Saw some other thread about it : Disabling IPv6 - `enableIPv6` and `kernelParams` - #6 by nopro404

  1. What’s the purpose of registering flake inputs?
  1. As for now, what do you mean by the below note, since it seems that your HM configs are OK, aren’t they?
  1. Off topic, but why warp is outside the lib.optionals isLinux condition, since it seems to be a gnome-specific application?

Thanks for your time and for sharing your config! :pray: