commit ecf48526917528562c4b68549a338151a471361d · ryan.freumh.org/nixos

+1

hosts/elephant/services.nix

···

       134
       134
        
       

     

       135
       135
        
         age.secrets.restic-owl.file = ../../secrets/restic-owl.age;

     

       136
       136
        
         age.secrets.restic-gecko.file = ../../secrets/restic-gecko.age;

     

       137
       137
       +
         age.secrets.restic-shrew.file = ../../secrets/restic-shrew.age;

     

       137
       138
        
         services.restic = {

     

       138
       139
        
           #backups.owl = {

     

       139
       140
        
           #  repository = "${config.services.restic.server.dataDir}/owl";

+12

hosts/shrew/default.nix

···

       156
       156
        
         #    uri = "tcp://0.0.0.0:10400";

     

       157
       157
        
         #  };

     

       158
       158
        
         #};

     

       159
       159
       +
       

     

       160
       160
       +
         age.secrets.restic-shrew.file = ../../secrets/restic-shrew.age;

     

       161
       161
       +
         services.restic.backups.${config.networking.hostName} = {

     

       162
       162
       +
           repository = "rest:http://100.64.0.9:8000/${config.networking.hostName}/";

     

       163
       163
       +
           passwordFile = config.age.secrets.restic-shrew.path;

     

       164
       164
       +
           initialize = true;

     

       165
       165
       +
           paths = [ "/var/lib/hass" ];

     

       166
       166
       +
           timerConfig = {

     

       167
       167
       +
             OnCalendar = "03:00";

     

       168
       168
       +
             randomizedDelaySec = "1hr";

     

       169
       169
       +
           };

     

       170
       170
       +
         };

     

       159
       171
        
       }

+9

secrets/restic-shrew.age

···

       1
       1
       +
       age-encryption.org/v1

     

       2
       2
       +
       -> ssh-ed25519 2wDnOw kVlkSP0K9Cywsoaj7tB3ZIBcpPYO1fEbtGp4yyc0BGQ

     

       3
       3
       +
       f5lHs91EnRziC/g2B4n3v6r1nBTjG7cjGGw+KfDn8JU

     

       4
       4
       +
       -> ssh-ed25519 lqHBBg JejhB4KfLmiSt5qa/kVTunFi/2xXgf+QFR9MktvDwCQ

     

       5
       5
       +
       W8+cr994BBcCa264nXB8SABVYy1U1CuiGSCA4iWHcZE

     

       6
       6
       +
       -> ssh-ed25519 hFxbYA xqskSphRgrdMWUbIXOOvsShkIEgIVB5yXCp5rgpavCM

     

       7
       7
       +
       vFFnpv7g4jvwJSrkce20YpXDh6f1PRdCIJf6I6f+u28

     

       8
       8
       +
       --- BqhrOyX5+eB0m4UnCFAAyDDasYn6crIHbaR+iR4UjgE

     

       9
       9
       +
       �á�����3sߒ&���٬���D|`	�P3�s�+���P)]�,Fp����V�]ބ

+1

secrets/secrets.nix

···

       22
       22
        
         "rmfakecloud.age".publicKeys = user ++ [ owl ];

     

       23
       23
        
         "restic-owl.age".publicKeys = user ++ [ owl elephant ];

     

       24
       24
        
         "restic-gecko.age".publicKeys = user ++ [ gecko elephant ];

     

       25
       25
       +
         "restic-shrew.age".publicKeys = user ++ [ shrew elephant ];

     

       25
       26
        
         "restic-elephant.age".publicKeys = user ++ [ elephant ];

     

       26
       27
        
         "restic.env.age".publicKeys = user ++ [ elephant ];

     

       27
       28
        
         "restic-repo.age".publicKeys = user ++ [ elephant ];