c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

mastodon: add restic

This commit is contained in:
Sandro - 2023-05-16 23:40:43 +02:00
parent d4024c74e8
commit 82b0e27eeb
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
3 changed files with 19 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
hosts/mastodon/default.nix
View File

@ -152,11 +152,15 @@
sops = {
defaultSopsFile = ./secrets.yaml;
secrets."mastodon/env".owner = "mastodon";
secrets."mastodon/otp-secret".owner = "mastodon";
secrets."mastodon/secret-key".owner = "mastodon";
secrets."mastodon/vapid-private-key".owner = "mastodon";
secrets."mastodon/vapid-public-key".owner = "mastodon";
secrets = {
"mastodon/env".owner = "mastodon";
"mastodon/otp-secret".owner = "mastodon";
"mastodon/secret-key".owner = "mastodon";
"mastodon/vapid-private-key".owner = "mastodon";
"mastodon/vapid-public-key".owner = "mastodon";
"restic/mastodon/password".owner = "root";
"restic/mastodon/repository".owner = "root";
};
};
system.stateVersion = "22.11";

8
hosts/mastodon/secrets.yaml
View File

@ -4,6 +4,10 @@ mastodon:
secret-key: ENC[AES256_GCM,data:wXeJ+7PLa3DxD2KpVqYNp6p/ZLr8G1AYWQh0i1+McECr4UfB/HsLWpHvYi7WKtpan4zlv/mwk7IexiJxmeQuxG+6fRpuZldhUyZ/KLMtYNKLEdrVJ+J5H7qTjrV+ZPupiH/YBsOFFBONL85N4q+xjmbJygM0oyqav9wggYjfFTk=,iv:3bo+UgYSiPSZnD6LFUFUKKIW0O3mfLsQPSmXmvFdOZM=,tag:01TrLthpGsFg6+h896hQ5A==,type:str]
vapid-private-key: ENC[AES256_GCM,data:ztmjieUomc9hdcwfV63Mv50/41yOXAhyO+gRT6gYH20SkRcVa6CXAA1snJI=,iv:ut7QDR3NfvCKzgWtFpSpqtYnZ4PsffFn6gTki6JPXXo=,tag:y6df9UkwOB/GIs+KyfqtrA==,type:str]
vapid-public-key: ENC[AES256_GCM,data:To3y0FkdfZNGpeVOMeyCyuuXMjHRkQjchQZrvhihGHtqZ4hhrTL8IWhKxznNZZgIf4GqlwKxujfLVNaO3JH/1losBWIg9H6n8w2tiCvBimmmLy5/kMxgoA==,iv:OR6+ncumdmOc59thNKICykpEjntucGr6FY6B1dl/koQ=,tag:Mk/Qc9VuU9R7MG6q74OJpg==,type:str]
restic:
mastodon:
password: ENC[AES256_GCM,data:vPOCjFC/lT6xrQgeebDH2JPs7CfmfXBae2FUOl+C36w=,iv:T6WCFtXDKyQGDIOLq9YEteUOu1IZTeDaOaPI3gFc4Sw=,tag:eYPA8oe/OAMSxio09jX/iw==,type:str]
repository: ENC[AES256_GCM,data:+3lgxWCY66L7EqoVljQeJ6kbYg++GRFeX6S9TPF2+55ISk1aV7N7+EGFnvpA4tnm1cWP9/PHhtUsNnnr/ZojrONoRb4dxtRR40PrFa2Qjx7i3gC/aI5OofD+s8YVwDDHgrGj2tZv,iv:Y/R4I7VJnb6LRG39VcMMn+fvvV25fbomaSGsbil6E10=,tag:KE9w0163i1l9+HrN4+UMAQ==,type:str]
sops:
kms: []
gcp_kms: []
@ -28,8 +32,8 @@ sops:
OU1FcHVDb2xIenVIdm5kNUdjYy9GTDQKRmjJIq4yiWN4mLU/+rJfdsZZT2m41DD9
0xlVibN8UkR/uLfs1CxdYSTewFKXtJzDYcQR1vUyb3oLUxP7fghPAw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2022-12-19T21:14:52Z"
mac: ENC[AES256_GCM,data:EA04ymrunaPh5vlGFy+KbeoUORGwT8mWVcosaFSY1QBODwVLB9vR0Q3kaqV4pCsoDEUJBAHmDfCOQNkZLTiHgEpNbsejQxL6wo+cGvHxqkCxidulG9WNkz6KBPnneFLmqCdTWoxyevWaiKc4B0Yfrmt9QSoz77F+PgDNPuKhTZs=,iv:C1CeyyQaUcMMGzyLBYBUnQI+5LxnaYmIxGe+RaaefJA=,tag:wJn9xjW57Tov0obWos9c8w==,type:str]
lastmodified: "2023-05-16T21:29:49Z"
mac: ENC[AES256_GCM,data:A/9PI3G6VlZfSjK8b62dwgmvCkhK0Dkh7vFtNTCky8R/uayYlHjYJph7NHrUhhFl3ATodXq4+QCAYIhwPRZwnqV7pqDVUJzrrJGjr7WKKkRmappmfQ8f51P/P3RGfiakTh6ZKWTT97tTFNpyvC6vcRyge9d5OZaEB1w9niwcpas=,iv:wMHWTSAT1m5l6KC6ImRgkouflMhfVQYgY6qj7gEqeEo=,tag:oqkYef9GribP7JTHWytC4A==,type:str]
pgp:
- created_at: "2022-12-26T19:10:06Z"
enc: |

8
hosts/server8/secrets.yaml
View File

@ -5,9 +5,9 @@ ceph:
osd.2:
keyfile: ENC[AES256_GCM,data:PwOm1GNXLUYVhjoTQB1Ne/X0J1OUeUBk3ucGJv2qgbgpJUH6sXR/Ng==,iv:q7JUhvn2jeyT55/DTepQTa4ocXl1zN9SdzKz1CO/XEE=,tag:lPsfERwCcfyjvaCWEd4e7w==,type:str]
restic:
password: ENC[AES256_GCM,data:hwI7QDkahKZlgQWkvU6eG7yxSjzvHEofGvkUGbjmcJ+YOJ+yWZA2RywK9v18hGP+RS3cXyx81z0ElC1oMFSddY4wPAJ5XLeouf7T2dIxBfKbLzE3/NEKRV9JzCAjnuPKcHxFCqPfTZ8Lb4LIvBUIP9VOCVBC+NELMaet,iv:Z+FQk+b3sE9Oxd9t5ic9Z84Zk/9hnUGZ9X5BgJ2AiEY=,tag:cWgafhM7ULwz26vpPlqzrw==,type:str]
password: ENC[AES256_GCM,data:49HqLytXPFVxCipfcbdNTiryCojL3b8zOjtlTsAXvOFPNFphRicP/YbeqFH9zmw9rV65txEtkAbGZRZQhWpPu0HKRztXDYJjur49K78iivc5+IcFjkZLPliEp7ae8E+W8ymmV2vYmvXzlJiOrOAruDD1AMKkrRyzgNupc4ufm9jOO/xiyto13e6s/uDy0LjgUfpycd7JhTzQk1IDDHut0gJNUcrs,iv:ZWzRkXRR9n47+gVBeTg3tsdezil8pHZ6rYMrSDXEmLw=,tag:wT+ImhmB1rMKh7KmGyrn0w==,type:str]
#ENC[AES256_GCM,data:wKIykk+mVh3I2Hyo2TZVftZxuPZzlAmPEIX41WO7eLka/03P01cTZQl6bmElMRprwWFY,iv:B1ujyiHpdDeNLFjntmRKaAEFknLVNzsxv52kTMx9hVw=,tag:hzyRxamPe7nSUoKFaUKJKw==,type:comment]
htpasswd: ENC[AES256_GCM,data:++6l7JPBgWKN0eNMYWhqa1ooifLI1ygclVrWlBt9UYhuTDKd5su6Ls66CRix5AXkqnzPR7h4/41MuFRm1wxkAPxW7rwBXfruE4dTQ66nNL75+cZYNniYNncJmcGuNB7lFp79xtYGA62OguXK1xc5wT0clMvHqD8V9W3TpWL8fHW23WvcwCjxUtPgl/wKcT2FQZfo02RRGMjdzVRQC7hizgEGFcg8Su03wdLukmiQLkkAd8YQl5hyIKK9nXnslxzs5pYoYkmVERfZbp9aYmiU,iv:5+GlI24OyTyNQS0+WilMgLgZGotG1SZNUEcFMGoSzuk=,tag:WNfYbdgAb9Jw4vUy08nM9A==,type:str]
htpasswd: ENC[AES256_GCM,data:Wp0ggn3TbUANlazoeuCRo8/cgyFRZVtCC01vh+XBJ5Xhz5F+BoHnalqm8NwkVC513FBvfTjFCQe5xPBL6yLlvSXA5UpidyIfn06DFXZZZJL8PW95s+pSxUdGgE/6IYE2UYEn8hUP47yYpq38/eKQWH/7PYmtEBasj22qKKCXysXcc5KoE/XcY4x75Whv8TzPz7auaG5gVCQM0Z+pYLSNb4mJ/lwUY+G8bSECKMZdakTMmbm6BQMvlFi4xdIfd9WJhy4WFAVeUv4bxqbA1zFYL5EYMbkxlbtqEwkVD5untjx/ma0irWJx1CIVEkqOKZzKqa4O/7icStxa3lZyy2aXs5QLgYGNHNs8FEX3GN/jWwb1KMoprw==,iv:3TpwbnLtzvURBsGyfRDnAo6EBea9rYM5t2HSbhfA0m8=,tag:/DYJZSBFZUxFMG6cBCnmfA==,type:str]
sops:
kms: []
gcp_kms: []
@ -32,8 +32,8 @@ sops:
bWl4MTZUak1Bb0JWRXhRQkR4ZUFnNHMKvKQnoxb3IC7jW0P/zewbR68yJI8Uzz7U
iPaL8MoOlmXPu5dHBSTwn39CpFR6bPxIDMHUn+y9gtCUrbIIJQAaQQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-16T20:46:25Z"
mac: ENC[AES256_GCM,data:yEmD6E6bpF1BSRdIKSzUYbb/YEoUyi6JNzRxZLO5uPDjkDn7XP7J2h9n6RN0WxfNXO7z9B4ZgI19NDOYgkECPIWm0p8vwKv1Bs1U6usUQx2l9qgb9DFJPUS80XPgdQLb9GHBlcqV0TYZ4mbs6JGa8pRzwHp+JvAesb0Pj9yBW/I=,iv:utRPIB1JfT8t0cHzSI3bPErNYlZZS1WgxEN2NPnl4OY=,tag:FUdZrrwjkRLXmEag8hSNrA==,type:str]
lastmodified: "2023-05-16T21:27:12Z"
mac: ENC[AES256_GCM,data:sZNCVw+jKJfGOrSJI64ePmm4HRLzBqtt11EcIoNGlAs/oxCZSYrHzgqW9+p1mpzilL0EnuZqVoKtXnXeKq3WqyyFFkwZH4ej7tbsmp4Y7iDoY0PPyWw5zNKc4Rl6bnkVSLjpZxo+Xv2/6WJRnYF0Khg2bmv879apVKp1XHrG+Tw=,iv:jGtyuB4Ofrrs8q/k+ZazU/SEZGetl0XvwjOTA6YKpfo=,tag:4MJ8OTFq2JWcuciXA5uuJw==,type:str]
pgp:
- created_at: "2022-12-27T23:54:07Z"
enc: |