Use a makefile for utility snippets

Makefile

@@ -0,0 +1,15 @@
+# Lockfile utils
+update-lockfile:
+	nix flake update --commit-lock-file
+update-lockfile-without-commit:
+	nix flake update
+
+# Agenix utils
+edit-secret:
+	cd secrets && agenix -e $(filter-out $@,$(MAKECMDGOALS))
+rekey-secrets:
+	cd secrets && agenix -r
+
+# NixOS utils
+clean-old-nixos-profiles:
+	doas nix-collect-garbage -d

common/default.nix

@@ -61,6 +61,7 @@
     lm_sensors
     picocom
     lf
+    gnumake
   ];
 
   nixpkgs.config.allowUnfree = true;

lockfile-update.sh

@@ -1,4 +0,0 @@
-#! /usr/bin/env nix-shell
-#! nix-shell -i bash -p bash
-
-nix flake update --commit-lock-file

secrets/rekey.sh

@@ -1,5 +0,0 @@
-#!/usr/bin/env bash
-set -e
-
-agenix -r
-git commit . -m "Rekey secrets"

update.sh

@@ -1,6 +0,0 @@
-#! /usr/bin/env nix-shell
-#! nix-shell -i bash -p bash
-
-git pull
-nix flake update # intentionally ignore the lockfile
-sudo nixos-rebuild switch --flake .