ctucx.git: nixfiles

ctucx' nixfiles

commit 39d03b12142823c8bf71e40474420f8a5fb5688e
parent 3a79e491404dbdf4ea3f9471ba95ad2a02184d01
Author: Leah (ctucx) <git@ctu.cx>
Date: Mon, 27 Mar 2023 15:20:29 +0200

machines/lollo/websites/things.home.ctu.cx: add restic-backup

3 files changed, 21 insertions(+), 0 deletions(-)
M
machines/lollo/websites/things.home.ctu.cx.nix
|
9
+++++++++
A
secrets/lollo/restic/things.age
|
11
+++++++++++
M
secrets/secrets.nix
|
1
+
diff --git a/machines/lollo/websites/things.home.ctu.cx.nix b/machines/lollo/websites/things.home.ctu.cx.nix
@@ -4,6 +4,15 @@
 
   dns.zones."ctu.cx".subdomains."things.home".CNAME = lib.mkIf config.networking.usePBBUplink [ "${config.networking.fqdn}." ];
 
+  age.secrets.restic-things.file = ../../../secrets/lollo/restic/things.age;
+
+  restic-backups.things = {
+    user            = "things";
+    passwordFile    = config.age.secrets.restic-things.path;
+    paths           = [ "/var/lib/ctucx-things" ];
+  };
+
+
   users.users.things = {
     isSystemUser = true;
     home = "/var/lib/ctucx-things";

diff --git a/secrets/lollo/restic/things.age b/secrets/lollo/restic/things.age
@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> X25519 65/Gcbx20+SHMujNE07AoddDyMuvFbWn1LtJm24Z/WA
+05Nh9mC8HmX1A4IK9XkQ+euwuiw0zbi8uqlbUm3Y4Z4
+-> ssh-ed25519 1rccKw hJcNnoh+CEsfor3RAXrlymP4z08lw8FT3rP9dlGIX0A
+gni7lA8DADhrjjwtAShhH8zC2JmGWuapm0ax0aIbixs
+-> =Rgk-grease 9T3e. 6T*X 8 L
+4SSmomsDXAhaHJSIBhONaePdTOoBCQu9RyAnTnAvCVG+w4Tcdfx2z4R8XOFf1ov0
+NHN0MyaJYE10RW2jBooaF5X2zmbW2Y5YOtPrLpFo8I2dBbQG
+--- mGtPegsXQo+IqnZN09KuQDALtwXH2JTpadS2AmwGdNs
+/ӉZgw-js<$Lj'ŢrVHCoN\ә뢄=~-`#^o]h+
\ No newline at end of file

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
@@ -48,6 +48,7 @@ in {
   "lollo/restic/oeffisearch.age".publicKeys                   = [ leah lollo ];
   "lollo/restic/radicale.age".publicKeys                      = [ leah lollo ];
   "lollo/restic/influxdb.age".publicKeys                      = [ leah lollo ];
+  "lollo/restic/things.age".publicKeys                        = [ leah lollo ];
 
   "lollo/restic/syncthing-audiobooks-orig.age".publicKeys     = [ leah lollo ];
   "lollo/restic/syncthing-audiobooks.age".publicKeys          = [ leah lollo ];