Look over the commands in an install.sh and execute them one by one. To decrypt secrets follow the following rough instructions:

• Copy over /etc/ssh/ssh_host_* to /state/etc/ssh/ssh_host_*
• Add the /etc/ssh/ssh_host_ed25519_key.pub key and ip address to nix/hosts.nix
• Generate password with mkpasswd -m sha-512 and make a secret with agenix -e my/path/to/secret
• Rekey all secrets with agenix -r

nixos-install --no-root-password

You can also use deploy-rs to deploy remotely.

• lovesegfault/nix-config
• notusknot/dotfiles-nix