diff --git a/hosts/poseidon/default.nix b/hosts/poseidon/default.nix index 8f02fce..282e26d 100644 --- a/hosts/poseidon/default.nix +++ b/hosts/poseidon/default.nix @@ -65,7 +65,9 @@ in restic-backup = { enable = true; - repo = secrets.restic-backup.poseidon-repo; + repo = "b2:poseidon-backup"; + passwordFile = config.age.secrets."restic-backup/poseidon-password".path; + environmentFile = config.age.secrets."restic-backup/poseidon-credentials".path; }; fail2ban = { diff --git a/hosts/poseidon/secrets.nix b/hosts/poseidon/secrets.nix index 962e4ff..f058804 100644 --- a/hosts/poseidon/secrets.nix +++ b/hosts/poseidon/secrets.nix @@ -17,6 +17,9 @@ owner = "matrix-synapse"; }; + "restic-backup/poseidon-credentials" = {}; + "restic-backup/poseidon-password" = {}; + "transmission/secret" = { owner = "transmission"; }; diff --git a/modules/secrets/restic-backup/poseidon-credentials.age b/modules/secrets/restic-backup/poseidon-credentials.age new file mode 100644 index 0000000..0b3b3a1 --- /dev/null +++ b/modules/secrets/restic-backup/poseidon-credentials.age @@ -0,0 +1,10 @@ +age-encryption.org/v1 +-> ssh-ed25519 k2gHjw oSO/cLGLMkjqRIjYewTqtOccb7CLSmODK+B6Kb/L/gk +cGU5gafJCeX/o3qqcNNPGIAXbAwm8sZi59QIDqcmWUA +-> ssh-ed25519 z6Eu8Q FMOXZNxOrbT95XR5R6tul1A+aiCP/QHRsCZraA/SZmw +UXjp7Z93U56hZ9f/OijkzZ1UCRf+VVwD0b1dY04lCVs +-> )-grease +qkTAz5YAzx5TLvSvmiAL1EDt3pYUgwdMMcRKDBdTBrvxeQE +--- EBQNvbSPDyq5SFKU517JyM024/zZx0DqoxMiP9jzlSs +rP+yjf>9Ȏ̷wt6sg/tS͗\fZꪝN?v +1I휹+uݾU-Cfn1`c-RCP'zB)F`VBKX \ No newline at end of file diff --git a/modules/secrets/restic-backup/poseidon-password.age b/modules/secrets/restic-backup/poseidon-password.age new file mode 100644 index 0000000..b8ca418 Binary files /dev/null and b/modules/secrets/restic-backup/poseidon-password.age differ diff --git a/modules/secrets/secrets.nix b/modules/secrets/secrets.nix index 9e2b6a5..4516497 100644 --- a/modules/secrets/secrets.nix +++ b/modules/secrets/secrets.nix @@ -19,6 +19,8 @@ in "restic-backup/boreal-password.age".publicKeys = [ alarsyo boreal ]; "restic-backup/boreal-credentials.age".publicKeys = [ alarsyo boreal ]; + "restic-backup/poseidon-password.age".publicKeys = [ alarsyo poseidon ]; + "restic-backup/poseidon-credentials.age".publicKeys = [ alarsyo poseidon ]; "restic-backup/zephyrus-password.age".publicKeys = [ alarsyo zephyrus ]; "restic-backup/zephyrus-credentials.age".publicKeys = [ alarsyo zephyrus ]; diff --git a/secrets/default.nix b/secrets/default.nix index f47f8fc..726354d 100644 --- a/secrets/default.nix +++ b/secrets/default.nix @@ -15,6 +15,5 @@ in { nextcloud-admin-user = fileContents ./nextcloud-admin-user.secret; paperless = import ./paperless { inherit lib; }; - restic-backup = import ./restic-backup { inherit lib; }; }; } diff --git a/secrets/restic-backup/default.nix b/secrets/restic-backup/default.nix deleted file mode 100644 index e9a3e7a..0000000 --- a/secrets/restic-backup/default.nix +++ /dev/null @@ -1,9 +0,0 @@ -{ lib }: -let - inherit (lib) - fileContents - ; -in -{ - poseidon-repo = fileContents ./poseidon-repo.secret; -} diff --git a/secrets/restic-backup/poseidon-repo.secret b/secrets/restic-backup/poseidon-repo.secret deleted file mode 100644 index db082cf..0000000 Binary files a/secrets/restic-backup/poseidon-repo.secret and /dev/null differ