jahanson/mochi
1
0
Fork 0
Code Issues 1 Pull requests Actions Packages Projects Releases Wiki Activity

Fixes for borg

Browse source
This commit is contained in:
Joseph Hanson 2024-07-26 23:51:45 -05:00
parent a92b6977ca
commit 47dfdfcac0
Signed by: jahanson
SSH key fingerprint: SHA256:vy6dKBECV522aPAwklFM3ReKAVB086rT3oWwiuiFG7o
3 changed files with 9 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
nixos/hosts/gandalf/default.nix
View file

@ -62,9 +62,6 @@ in
mode = "0444";
sopsFile = ./secrets.sops.yaml;
};
"borg/repository/location" = {
sopsFile = ./secrets.sops.yaml;
};
"borg/repository/passphrase" = {
sopsFile = ./secrets.sops.yaml;
};
@ -88,13 +85,13 @@ in
resticBackup.local.enable = false;
resticBackup.remote.enable = false;
# # Borg
# borgbackup = {
# enable = true;
# paths = [ "/home" ];
# exclude = [ ];
# repo = "ssh://t3zvn0dd@t3zvn0dd.repo.borgbase.com/./repo";
# repoKeyPath = "/run/secrets/borgbackup/telchar";
# };
borgbackup = {
enable = true;
paths = [ "/home" ];
exclude = [ ];
repo = "ssh://t3zvn0dd@t3zvn0dd.repo.borgbase.com/./repo";
repoKeyPath = config.sops.secrets."borg/repository/passphrase".path;
};
};
services = {
podman.enable = true;

5
nixos/hosts/gandalf/secrets.sops.yaml
View file

@ -3,7 +3,6 @@ lego:
token: ENC[AES256_GCM,data:CfRFhGE8AyZfO9RzoXXTfm8kstvx+Fuy53o9ulYNZiufzzSQ4KzwYIoCRw==,iv:HEC8hRpmk7YDI7RHj29ZAeFKyPgsWTHw1sxjdZuhcrw=,tag:7RhEhZ9GkyBE9PJRe+gD+Q==,type:str]
borg:
repository:
location: ENC[AES256_GCM,data:C3W4H2Tp23jEAbkrXv2lvWLSsragsphl+i51sWGfrQ2wXjAwj59LPtLpPHxggvCc,iv:l5FA/wgoCnyzCnCChi6iE2Acq5aMkmWdFec2kYj9lA0=,tag:IB/4ThqFqbMIQKPAof7fbQ==,type:str]
passphrase: ENC[AES256_GCM,data:lt0Rq269GoBuLNw9fxwuMAmtYjE=,iv:57IFde6EX7myLSCvYXkkbSulr8S7JPYoThWBsPLH0Yw=,tag:NwlpouurYF+2qmw2T3De8A==,type:str]
sops:
kms: []
@ -74,8 +73,8 @@ sops:
V1d0d1lKb3hyYVQ4elBIZ0hnU3FTbnMKiWERjAwlJRPK+PILCBV03uyNVnNgolA8
PS0vbIDVNiX0pIrRlM2sVivZwqajjTB3XROXMmbIKpQxDMjvpHgqJA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-07-27T03:58:24Z"
mac: ENC[AES256_GCM,data:1X1tYx+zciKiwSrxfdV5BF+MLzNZaw3umgNay5c1xO5zUilAIvf7iAoQPZoDh26AxSTG5qTL5A1IC0YGYYpIasF20bBThpLDzfaA2wMpZSL7OPggIH2t/GInwPOOvBph4O1POtpOtpyRGa2ZYB7e/Ix9dbHlagOsOSdAmi3xkRU=,iv:O5nrQDCCMiblm9PQzwV4xPzyY4GaIEJuA4LOgUJfmYA=,tag:WmdUbf+M9qDNGLJQEdvhdQ==,type:str]
lastmodified: "2024-07-27T04:50:25Z"
mac: ENC[AES256_GCM,data:IKLC9N4FvfV+eWFoVZa5ijyBdiQuNdXAE4Z/pQNhns+qTuMpuz9QLeQGysow8zCqg9z5WHPa+U10uBIJg0P6Bq2CkBTJ2/75axsQgqc+BPuY4cUfppbYqQaSzB831b3XMHei9m/IPXNoh277jk0E9A0mOzHu4YsBEEzyf5nESn4=,iv:dOIgrQD0eDB1lqTWoDoLXnDZTWJLf5m9a948Wabfc6I=,tag:MWoIe5UpTqZCDDJMcg0swA==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1

4
nixos/modules/nixos/system/borg/default.nix
View file

@ -8,24 +8,20 @@ in
paths = lib.mkOption {
type = lib.types.listOf lib.types.str;
default = [ ];
required = true;
};
exclude = lib.mkOption {
type = lib.types.listOf lib.types.str;
default = [ ];
required = false;
};
repo = lib.mkOption {
example = "borgbackup@myserver:repo";
type = lib.types.str;
default = "";
required = true;
};
repoKeyPath = lib.mkOption {
example = "/run/secrets/borgbackup/telchar";
type = lib.types.str;
default = "";
required = false;
};
};