felix/nixos
1
0
Fork 0
mirror of https://github.com/Stunkymonkey/nixos.git synced 2025-09-13 22:12:03 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

module/backup: update secrets

Browse source
This commit is contained in:
Felix Buehler 2022-12-03 15:22:44 +01:00
parent 29c534c7d0
commit fbe8e1cde3
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
nixos/modules/backup.nix
View file

@ -28,8 +28,8 @@ in
borgbackupMonitor borgbackupMonitor
]; ];
sops.secrets.borgbackup_password = { }; sops.secrets."borgbackup/password" = { };
sops.secrets.borgbackup_private_ssh_key = { }; sops.secrets."borgbackup/private_ssh_key" = { };
services.borgbackup.jobs.hetzner = { services.borgbackup.jobs.hetzner = {
paths = [ paths = [
@ -59,9 +59,9 @@ in
extraCreateArgs = "--exclude-caches --keep-exclude-tags --stats"; extraCreateArgs = "--exclude-caches --keep-exclude-tags --stats";
encryption = { encryption = {
mode = "repokey-blake2"; mode = "repokey-blake2";
passCommand = "cat ${config.sops.secrets.borgbackup_password.path}"; passCommand = "cat ${config.sops.secrets."borgbackup/password".path}";
}; };
environment.BORG_RSH = "ssh -o 'StrictHostKeyChecking=no' -i ${config.sops.secrets.borgbackup_private_ssh_key.path} -p 23"; environment.BORG_RSH = "ssh -o 'StrictHostKeyChecking=no' -i ${config.sops.secrets."borgbackup/private_ssh_key".path} -p 23";
repo = borgbackupPath + ":${config.networking.hostName}/"; repo = borgbackupPath + ":${config.networking.hostName}/";
compression = "auto,zstd"; compression = "auto,zstd";
doInit = false; doInit = false;