Deployment happens in three steps:
- Boot a rescue system and kexec into a NixOS installer system.
This system has a known SSH host key. - Using the installer system, install a base system (
../base.nix
).
This is a minimal version of the main system (../configuration.nix
) without public-facing services. - Deploy the main system using the standard deployment method.
These steps are implemented in: ./deploy.sh