NixOS on Hetzner Cloud

This is the gist of how to setup a NixOS server on a Hetzner Cloud instance with an admin user, ssh access and configuration management via git.

1. Create a Hetzner Cloud instance and click to enter it.
2. Stop the instance (top right corner icon).
3. Go to ISO Images.
4. Search for "nixos" and click mount.
5. Start the instance again (top right corner icon).
6. Open the console (top right corner icon).
7. Get the IP address by executing ip --brief --color address. The address can also be optained from the Hetzner Cloud web interface.

lo               UNKNOWN        127.0.0.1/8 ::1/128
enp61s0          UP             <IPv4 address>/24 <IPv6 address>/64

8. Download your public ssh key to the machine. If you have a GitHub account you can download it from there.

mkdir ~/.ssh
curl -L https://github.com/<username>.keys | tee -a .ssh/authorized_keys

9. Log on from your computer on via ssh.

ssh nixos@<IPv4 address>

10. Partition, format and mountthe disk.

sudo -i
parted /dev/sda -- mklabel msdos
parted /dev/sda -- mkpart primary 1MiB 100%
partprobe
mkfs.ext4 -L nixos /dev/sda1
mount /dev/disk/by-label/nixos /mnt

11. Generate the initial configuration and install.

nixos-generate-config --root /mnt
sed -e 's/^.*boot\.\.grub\.device.*$/  boot..grub.device = "\/dev\/sda";/g' -i /mnt/etc/nixos/configuration.nix
mkdir /mnt/etc/nixos/configuration/
sed -e 's/\.\/hardware-configuration\.nix/.\/hardware-configuration.nix\n      .\/configuration/g' -i /mnt/etc/nixos/configuration.nix

12. Open /mnt/etc/nixos/configuration/default.nix with an editor like vim or nano and paste the following.

{ config, pkgs, ... }:

{
  imports =
    [
      ./user.nix
    ];
  environment.systemPackages = with pkgs; [
    vim
    wget
    git
    htop bottom
  ];
  services.openssh.enable = true;
}

13. Open /mnt/etc/nixos/configuration/user.nix with an editor and paste the following to create an account with the name admin. Replace the public ssh key with yours.

{ config, pkgs, ... }:

{
  imports = [
  ];
  users = {
    users = {
      admin = {
        isNormalUser = true;
        extraGroups = [ "wheel" ];
        initialHashedPassword = "";
        openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAA...." ];
      };
    };
  };
}

15. Perform installation.

nixos-install --no-root-passwd

16. Enter the mounted installation and set a password for the admin account.

nixos-enter --root /mnt
passwd admin
exit

17. Shut down the machine.

poweroff

18. Unmount the ISO in the Hetzner Cloud interface and start the machine again.
19. Log on via SSH.

ssh-keygen -R <IPv4 address>
ssh admin@<IPv4 address>

20. Turn custom config into repo of admin for convenience

mkdir repos
cp -R /etc/nixos/configuration/ repos/
cd repos/configuration/
git init
git config user.name admin
git config user.email admin@localhost
git add .
git commit -m "initial commit"
sudo rm -r /etc/nixos/configuration/
sudo ln -s /home/admin/repos/configuration/ /etc/nixos/
sudo nixos-rebuild dry-run

21. Have fun and happy hacking!