c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

mediawiki: add restic

This commit is contained in:
Sandro - 2023-05-16 23:17:41 +02:00
parent 7b06f91cfb
commit 811b6fb3cd
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
3 changed files with 14 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/mediawiki/default.nix
View File

@ -201,6 +201,8 @@ in
package = pkgs.postgresql_15;
upgrade.stopServices = [ "httpd" "phpfpm-mediawiki" ];
};
restic.backups."remote-server8".paths = [ "/var/lib/mediawiki/uploads/" ];
};
sops = {
@ -214,6 +216,8 @@ in
path = "/var/lib/mediawiki/secret.key";
};
"mediawiki/upgradeKey".owner = config.systemd.services.mediawiki-init.serviceConfig.User;
"restic/mediawiki/password".owner = "root";
"restic/mediawiki/repository".owner = "root";
};
};

8
hosts/mediawiki/secrets.yaml
View File

@ -3,6 +3,10 @@ mediawiki:
secretKey: ENC[AES256_GCM,data:Qmnvm+Lqa6+5I+Lj71WkW3ZrWr8hKB7KkvDkwbNAU8A1R4axJSbfXosZWelCqym36bjjxp1ThHXSyJ1M24PFG1B+tlODmLC+WbVm,iv:Gghszp+0dO5yQ/gTTRJ3cSASz62hVJP35cgvgWFJQ4c=,tag:EcGRs6mOgscoJIe2IFbjiw==,type:str]
upgradeKey: ENC[AES256_GCM,data:d6nSrNN3bD9smLH4VaJBuA==,iv:XFivelGD25QQmZ44raSvGB89oBtxu9rKRxuHQ04+53w=,tag:eNHkNnfOF6JOQENope65tg==,type:str]
ldapprovider: ENC[AES256_GCM,data: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,iv:q49SA9/vfnoIysVGE68LMf8dZ3/Cj7aEH0vCH/MAvJM=,tag:LJINBjCtMrAveBKY6mqz5Q==,type:str]
restic:
mediawiki:
password: ENC[AES256_GCM,data:5jnUE4UQ1JY65tR8W+8E5IUal3xFLb2ApZb5zm/XgFE=,iv:NMWpSXlPmlQrLD+dKUkWFGj+90laZJ4J7d4a9bcMjwo=,tag:iGXCUOwaaBWAMUez00GTeA==,type:str]
repository: ENC[AES256_GCM,data:3YCwwUNsi9xdabnF++NfKMxfuSKMRXqaSQX/2EOjEBzQ0gKlzZtx6fCX1YJzfZGThmL79kNkqoJL4tuR6ou5pqC/xYf3BmbfK5OuDOpMWdvFpbhzwCf1752lo5v5RSRWpXthjZpPjU4=,iv:iRDs2NuFLkMf/2vCT43A5gY0U3hsmkcTCLXR0QZZczI=,tag:yBAn5RSY5gpUfTEpMFaS7Q==,type:str]
sops:
kms: []
gcp_kms: []
@ -27,8 +31,8 @@ sops:
dGFiNnQ2YjlYbE10VVY0TS9JSGoxVE0KIGxsQZ3NW8obnIud3H6s+zVNkiFf2TYD
8ddmsulRCZAtw3qRuNikMKAbNsE+foO0fLb5Cem9doOcXpcYIwp1vA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2022-08-07T11:31:20Z"
mac: ENC[AES256_GCM,data:EbSJkthEK2xBaL3dttiYLVqBRMC6BwwbyovUrE3r2v7AJ4KP7mnJwrmvZ83ZFPyXeGUgcRwcpPgjImcSntUv9XLsau2Se9FKJPUn5JDcpmv49vxrkrYrDt/IuCgSFZk31pxqBcBb2clkJ/7eliEmnQsj/j8i9YzEg60reRxTAoQ=,iv:qGLm2+uAwNW5zURPT+afJ/pG4YomLp2NQz62Adguug8=,tag:6DqsrpjdR9xxDHuXe/8hOQ==,type:str]
lastmodified: "2023-05-16T20:47:10Z"
mac: ENC[AES256_GCM,data:B+KDkXpag2Q/WahJDfcCXh75A4tmlvr7Mt7rq1XvnPhAIqQjoXbZOnKs0/99mY8WZuO4qbBUfxKDk1rs+rbQv5yQgSsrK1ISMQ9qqIQBMwm9WcX+F+7l93PRm6sPNQgWXq6XG7ekHOeu4KTzm61nWxv3ugdXHokRKEnduAVOXOk=,iv:5WrtZKr8/neSqleG3/Xk0Mp/eNmlM9i4KNooiVs8jQs=,tag:MAB6/dwuc4pVD+htFYRQOg==,type:str]
pgp:
- created_at: "2022-12-26T19:10:07Z"
enc: |

8
hosts/server8/secrets.yaml
View File

@ -5,9 +5,9 @@ ceph:
osd.2:
keyfile: ENC[AES256_GCM,data:PwOm1GNXLUYVhjoTQB1Ne/X0J1OUeUBk3ucGJv2qgbgpJUH6sXR/Ng==,iv:q7JUhvn2jeyT55/DTepQTa4ocXl1zN9SdzKz1CO/XEE=,tag:lPsfERwCcfyjvaCWEd4e7w==,type:str]
restic:
password: ENC[AES256_GCM,data:70U8dS3ho2t0IJP4PkAX+tYHxHLI/dYjTQsQ8/g6r/eAhstU7zKmoiOgm8SnQfVdnyDh1RYHhWBCyEUW4oUCA0ooybUTANigkIOsD2zaMWc=,iv:33zrYCT6eMleWkswFBlX06L1lwOvUMPlSRA2jPYv3RI=,tag:jSwuD8d74yFOevoeGTJ4tQ==,type:str]
password: ENC[AES256_GCM,data:hwI7QDkahKZlgQWkvU6eG7yxSjzvHEofGvkUGbjmcJ+YOJ+yWZA2RywK9v18hGP+RS3cXyx81z0ElC1oMFSddY4wPAJ5XLeouf7T2dIxBfKbLzE3/NEKRV9JzCAjnuPKcHxFCqPfTZ8Lb4LIvBUIP9VOCVBC+NELMaet,iv:Z+FQk+b3sE9Oxd9t5ic9Z84Zk/9hnUGZ9X5BgJ2AiEY=,tag:cWgafhM7ULwz26vpPlqzrw==,type:str]
#ENC[AES256_GCM,data:wKIykk+mVh3I2Hyo2TZVftZxuPZzlAmPEIX41WO7eLka/03P01cTZQl6bmElMRprwWFY,iv:B1ujyiHpdDeNLFjntmRKaAEFknLVNzsxv52kTMx9hVw=,tag:hzyRxamPe7nSUoKFaUKJKw==,type:comment]
htpasswd: ENC[AES256_GCM,data:bZNDezRAChy6Szbuk5hq4NwqlGAqhyZifazlou2w057/q5aCCflu9yTubPSp/ytnerOnRk1joBBcoZBU56yB40P3XlxXsgXh+ZIlHPPmucacHQMh+Ue8HTZM1p0RLVD0qBGanEchwH1SDEJ5VTvQ0Fk6bgwRCZBlQxL5YO23kOhnIArwtrSQrg==,iv:pQxH4zuXJfuFJaa4lCYjI8tfjZateadxVnWlsUYRLXM=,tag:zDymWrPbtn54sKdWwP2y5A==,type:str]
htpasswd: ENC[AES256_GCM,data:++6l7JPBgWKN0eNMYWhqa1ooifLI1ygclVrWlBt9UYhuTDKd5su6Ls66CRix5AXkqnzPR7h4/41MuFRm1wxkAPxW7rwBXfruE4dTQ66nNL75+cZYNniYNncJmcGuNB7lFp79xtYGA62OguXK1xc5wT0clMvHqD8V9W3TpWL8fHW23WvcwCjxUtPgl/wKcT2FQZfo02RRGMjdzVRQC7hizgEGFcg8Su03wdLukmiQLkkAd8YQl5hyIKK9nXnslxzs5pYoYkmVERfZbp9aYmiU,iv:5+GlI24OyTyNQS0+WilMgLgZGotG1SZNUEcFMGoSzuk=,tag:WNfYbdgAb9Jw4vUy08nM9A==,type:str]
sops:
kms: []
gcp_kms: []
@ -32,8 +32,8 @@ sops:
bWl4MTZUak1Bb0JWRXhRQkR4ZUFnNHMKvKQnoxb3IC7jW0P/zewbR68yJI8Uzz7U
iPaL8MoOlmXPu5dHBSTwn39CpFR6bPxIDMHUn+y9gtCUrbIIJQAaQQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-15T21:48:28Z"
mac: ENC[AES256_GCM,data:ZhanhWQ5RqIAEaUe/HRcEWtUsv5TrjHo99RRPupx6BTrezpJ/0YIv4Sc+72wdA2y2hg3reyUC4pgcGYJnAgk1Hv90J1WK8zAKylc38UtUZJPWtey86fnWIPCjZgKcZf2rg2uI9yL/yK6B01RFB+G0RUdOWEQOwYL13QGpj1rNcY=,iv:mj5ps7Ay6YMWet6GDKu3BkNYfZJbi91AumuL4+Ts2Iw=,tag:ROU0jPhAwp8ItSlsWu1YmA==,type:str]
lastmodified: "2023-05-16T20:46:25Z"
mac: ENC[AES256_GCM,data:yEmD6E6bpF1BSRdIKSzUYbb/YEoUyi6JNzRxZLO5uPDjkDn7XP7J2h9n6RN0WxfNXO7z9B4ZgI19NDOYgkECPIWm0p8vwKv1Bs1U6usUQx2l9qgb9DFJPUS80XPgdQLb9GHBlcqV0TYZ4mbs6JGa8pRzwHp+JvAesb0Pj9yBW/I=,iv:utRPIB1JfT8t0cHzSI3bPErNYlZZS1WgxEN2NPnl4OY=,tag:FUdZrrwjkRLXmEag8hSNrA==,type:str]
pgp:
- created_at: "2022-12-27T23:54:07Z"
enc: |