c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

Rename repository

This commit is contained in:
Sandro - 2023-08-09 00:36:09 +02:00
parent 19fa44414d
commit aa969731b1
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
27 changed files with 66 additions and 66 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/blogs/default.nix
View File

@ -28,7 +28,7 @@
secrets = {
"plume/env".owner = config.systemd.services.plume.serviceConfig.User;
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
};
};

8
hosts/blogs/secrets.yaml
View File

@ -2,8 +2,8 @@ plume:
env: ENC[AES256_GCM,data:V7pEExE5jGT7JSCejzo1m0QlMgpKuaF5CnHvR7LCvTJSgoCeeNW9ImtVk8MtqtoRngH45jgseuC5wZNzXSMG/ltQ4c3ThDcxKP5ngLmEZ3tOqSlIdV/A3S4ww4f/UAx8YpNY4c/LlL9NuCcfpHyC4zwRFrD6odCSk7BUT0BU+zxOBDpQDAHscBz+YYTbb3cJ7iGYg1fXS6wLJHutf0eXYF5VNcc80SISEfbR+bs9t2f7Dg==,iv:3n+EDT9TO5VxCS6rXZiNKpxtCWeCDi6YT3dQsrECNmU=,tag:ysWwxhR1JNJ7WUM28TIQig==,type:str]
restic:
password: ENC[AES256_GCM,data:5SUmmFclsGFskWM1E0qOQN0TDB7sllEBnDFslUHTqZs=,iv:WoWtaR4byoRjnZaakBhZYHfzBFKrJ1g3ylWj6Vkom2Y=,tag:0M+MXU8Xe3Ig50rmaqwzjA==,type:str]
repository:
server8: ENC[AES256_GCM,data:rhZ8jaqrsZ8caom64m32D8O8qgr4KXJwzm8q8+UlcpXdMfcXVlzNkTW+Lq5D/nXJ6KUoBV4zeYNwzLgbjPd2xTJYAlUbGC039Fd8ZI19v+PZsypMAtbf4PpYQPwy1LtJ,iv:QkX5Iy7iB9yRj9YI6I1YHNXmdhF0FaUYJTOAXgJc8II=,tag:EanCBxAJQ0jH17tMkCo1kA==,type:str]
repositories:
server8: ENC[AES256_GCM,data:ZW/hRX24sfjGd2G/bX3KR3YEvOmi2ydJfdD0b8A+1RrE1a4XIt8Q/a5qcKHk4Gym7vW7e4927zMD0RiRjUByfRCDwU0pEw2ZJ20w3TtC7/1fweZzxte67kImRhADzW5g,iv:9+Uoy+mXPQ4Ig5EiSgxZUWkFiiZbznbdonvrtV0LHsM=,tag:CdEuZf79+Y6VraKhPjHRFw==,type:str]
sops:
kms: []
gcp_kms: []
@ -28,8 +28,8 @@ sops:
andNczl4SzJaeDNpQ1dhNm1PcUc0eTQKR/hEIrWWsixnW5HGb4D0Hg6RTA22NBqq
2QeYsLP2QALu/+y+ljewr9K2nYOb70NOrx5FKD3cAgtq8871Lf59fQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-06-05T19:00:16Z"
mac: ENC[AES256_GCM,data:irZqZZ3wz8N1JUcX7GSM2FTdLlek49fvF2Uh6SJiwkMTizsKBhBF3RzD8nN2eh0fFkMuK5kjc24S1GRQwfPY/mBOEXfKXUn+3RRAE99UgUfgPFc+IEMH70AOl8mrsfOUXzVmkW2gDmxL900eyMIJIjWTgKd1B/jsUDiEwSeSpU4=,iv:eziRYdbRlwD809J22CmHU462es9MD/O1z6rFBB2wNrI=,tag:3+D4ngcpbZcL50Mfq7S8qA==,type:str]
lastmodified: "2023-08-08T22:31:32Z"
mac: ENC[AES256_GCM,data:29m1Vv0MdHg49k4VubXeMij6nWjb7LjXtuKoUMPF5RZyS+wZxl7e2rIg3dqjDmMX7zHb8wyBK3l8WvUQj3zhCWDYILqyKsXCL8DpHSh/xs23R+6vo7TL68tJDdzYc9W/5ApD7ORdE6geUyHRn7S9WU6GWLhgfIDACdDBAq7SJdE=,iv:cfZS2Q29cT8avfmhlXI4Xzhz9+PvQFO33OgbeuyOyT8=,tag:YWid+v3qPzEdYrIp9I0/gw==,type:str]
pgp:
- created_at: "2022-12-26T19:09:33Z"
enc: |

2
hosts/buzzrelay/default.nix
View File

@ -22,7 +22,7 @@
"buzzrelay/privKey".owner = config.services.buzzrelay.user;
"buzzrelay/pubKey".owner = config.services.buzzrelay.user;
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
};
};

8
hosts/buzzrelay/secrets.yaml
View File

@ -3,8 +3,8 @@ buzzrelay:
pubKey: ENC[AES256_GCM,data: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,iv:57uSeefhjsCXsqhIR1mOESsyCHMOxVAsmksnRQDOPcQ=,tag:9QE59kct+B+2iFLNBxkPxw==,type:str]
restic:
password: ENC[AES256_GCM,data:SRh/c+JNWuU+MNfbAuHysU6q8AyO+/5wC9mDBlaVNJ8=,iv:g3xdXDWuC5y9Ot8qSJ9Y+TkgyJEZTGekVEa41aJgdMg=,tag:tqKUWjbq/7r7yjI8f8sCjQ==,type:str]
repository:
server8: ENC[AES256_GCM,data:O93vAofq4pdlN2B3k4btkyEeKv5XQ2YOkCTAUMQs7/v7pXu3ZbfO61VwPz7jr+X1dixBaaCbxb2XIroQSENoGFyLnNZfsQcQZzdWNv57r3s19cfkKjZxL9wZenZq6FHkLlZeh59iCjI=,iv:ugcLN08AtD1MTFErEbGYjLyJ6LSwPQ+gT/3ljgoKtbs=,tag:qb/9P5mCfeJAyBwJ1DJTig==,type:str]
repositories:
server8: ENC[AES256_GCM,data:Rnc+5a1QBfG2SrANL+rt48Nju1py6g3gBsAPsGAycmy2qgnpJ5NmCc5Szh0lB/clrcB9EJ2YL1YdMCe3zGl0fbzK0ZdAkN02eGk5oGDnxiyNsMk/NPSa7ydmCznE2D2tVq1eoCcJPO0=,iv:espMVQQSGdH0+7+7EwuY9VAV13x2mYPvT/CRYwdKOp4=,tag:4mly1XDZz0jsyMlanVFImw==,type:str]
sops:
kms: []
gcp_kms: []
@ -29,8 +29,8 @@ sops:
Y0YrcVZSaU1Dcyt0RlMvN1I1UktGL2cKnDdeiNiq3xeUJsKGXb4IvguzNMQHKrqO
lymktEJ+786MuMxvcR4nP1kEK3o9h/Pt+HRqGcdGV2gu9oOE7GBo5w==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-18T18:23:08Z"
mac: ENC[AES256_GCM,data:1RLmCxumcJ1WJMycqJc2ka3OiiuqrfhddoAclvdJJ6JrJlhpyEFAEtiecE0FOOCsf066jcYhIb8QGWLvJ5g88vgbc+Zl9Jx41keVgreWFKLRIEMebl6EtvnqWzsBISwwSaZzpYwylO987QkoYWIkQ0Q5AxZQCJ1SJMfyxuJ896Y=,iv:qBYyq2M5NUbTfUSie9IzQlit36129aEfrQpBUFfdNro=,tag:pLYwLKe0ZMbjpxXatT+6+g==,type:str]
lastmodified: "2023-08-08T22:28:00Z"
mac: ENC[AES256_GCM,data:cT4c7y9mIX1GSytBp9gcas7Q0JN08D+uKIZdBXWbnzxDEvKWZpMRprSn6o2RiCzrIgka9bqcaYnTCWC14S6PwEUYRq0JpYffS8hVaBISIJbS4loxgzxjkOLArJ3Xsbxxft/6cy/iCeEjDT3hNvateZ/3XUGAZ+AnKl38YIjsEM0=,iv:DkPiXMH6azpOrsdCckyerjIIffKTlzT4WplrbzpJCdw=,tag:jhnrwroeFcCOnH/Qkf6zlg==,type:str]
pgp:
- created_at: "2022-12-26T19:09:36Z"
enc: |

2
hosts/drone/default.nix
View File

@ -92,7 +92,7 @@ in
"drone/runner/environmentFile".owner = "drone";
"drone/server/environmentFile".owner = "drone";
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
};
};

8
hosts/drone/secrets.yaml
View File

@ -7,8 +7,8 @@ drone:
ssh-keys: ENC[AES256_GCM,data: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,iv:a4IDvnBlgcSLlA7v5TZW6ZzlUe0UA8yU3Mp5Bzk3BHQ=,tag:ioEokhnx9jBLlL/fKDoVzg==,type:str]
restic:
password: ENC[AES256_GCM,data:rBbfglIE6DAlL8SAdhGIquR7oj+qusjV1xPGWfrAADw=,iv:7mYmLy7+ymf/qsKefedx854s2/+aglrU796Bgdyi/+A=,tag:Kd2RDXOGdcKSsDhPDEbHLQ==,type:str]
repository:
server8: ENC[AES256_GCM,data:vOLtJmuwAwE/Gena0HuG0J4LtPqp41UAi1Fgy0xWLzVBkTiiR5m2Ab99w3nZKGxlK/OuWp34c/fYIn7SLjgRxJB2nzjkFIjAy4lAwcKbTVg9riXLiRZChjcLf5D5XnVL,iv:wdfE3ZeXOZa0YcvBeErGh/JpKAuvMHG7M9VsSNH2e8s=,tag:PRitZnspqA10dTGqkUmBpw==,type:str]
repositories:
server8: ENC[AES256_GCM,data:pLp0itwQvDrIwaxwm2bMt/o35w7Iz+q+AchoHJYSejqR+Fq+tndjRe7a1jYka32QrndqES4JBhTQxBfyfgpep9MbCtfUShP8Oc2K/5EJfNJRTdFEM2XeUVNrhTvfMc1I,iv:PRgFps5q6A5+bTANsPjmCjQ8ISBOy5EZ1F+vDBWxHoE=,tag:WzQrArAaPjsM1vloUtesWA==,type:str]
sops:
kms: []
gcp_kms: []
@ -33,8 +33,8 @@ sops:
QUVobWZTWU1zMlhFRVVZVmZnbmRFQjAKsdNmKUyH8ThvrkFt2m2dseAhhxx9/Nr1
PWtyKJx49hWqdq8QB/UlhdCRP4fWV/ENOLxkxx3R3YipY/439DNWLg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-23T18:29:18Z"
mac: ENC[AES256_GCM,data:SVKmp7PQHyHZgF2Fud9ubI4Nn5j28AC8U8CxBAlJ09a6PaTT/yjTSz8Dn8rD8LEXLgf4hO95veO7WjBL6U9aNG2Wvu9ARLutE8e/CvWEzSshZJCaWX2mtkMm7IT/kC/LNW9sMsU+8Gi2WwAxFLVc2jMb6eMTfUEIABYi12dDk64=,iv:0kW6F5OL6IQV8zL5b138EjorHgi3ZFvO/54+9yNtAOQ=,tag:EOlHr8u2Toirqkwrmm9byA==,type:str]
lastmodified: "2023-08-08T22:31:02Z"
mac: ENC[AES256_GCM,data:MUqXYZHnr57VMRhOLVH3lglWaodz+u9GzoDyhA2fFQi6lqqQIVyV81U2M+bl51g6254UUANGYNKPTxVLa/squpvYjSon2g2Vxzi1wYFY19RrYTWeEM0R3gDN+5O8x4QJ05sgbespCVM1UxriSbNiObaMuv93pjtr/OO2GyWxeP4=,iv:u98PF9cZZPlVzR8KI5IiQ4pKchkCSKUO+GQ8D/7XE9E=,tag:j2GkVDdoTckMqOGoqBVk4g==,type:str]
pgp:
- created_at: "2023-01-29T20:31:40Z"
enc: |

2
hosts/gitea/default.nix
View File

@ -147,7 +147,7 @@
secrets = {
"gitea/ldapSearchUserPassword".owner = "gitea";
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
};
};

8
hosts/gitea/secrets.yaml
View File

@ -2,8 +2,8 @@ gitea:
ldapSearchUserPassword: ENC[AES256_GCM,data:c19HAzk0/KYCP9liYTIO8ZgG6T1GYFoQoq/X0oJJbOs=,iv:R1bbx6q+6R0bMP14FjRAug3zfw3+hzJKY9v3CWsNQnc=,tag:O16XCUzWV33ukDUIY9vxow==,type:str]
restic:
password: ENC[AES256_GCM,data:cAiFmuJ7ziJxBhlsmV4hiSz8rhR2V/Oc7w5kwRKFb6s=,iv:H7+x7Xgt1/KLT+ahyl1KbXsIftWYaCa8x4AyRkVrI/U=,tag:UPtgF9EuE2Q4VrDV2HRp4w==,type:str]
repository:
server8: ENC[AES256_GCM,data:s36qZ+KOUiKUVZmykFAxAx8Ij86dQU2cQOAWi8L9q0r5jnUs3eMBW9q1wAmFqiEFy1VJsPgkUNL8GjnVkQ86TIhnvLQ8S2JP3cGNHTleb3TCl9OlAHVE9tzKNNbVooWM,iv:bJYqAZosvVeRPrYbeu38c8CCxyqgXhePx21VUJAUOHU=,tag:FEgR4eCMThfs43tcZMnqZw==,type:str]
repositories:
server8: ENC[AES256_GCM,data:WCtj4ZBEBZ1xN7PymevYd90javLQkEaXa++3sa8AjdfsG4EgxxjoYbCQmKQT0KvGDAjlN7vldkrlO3fsX/CwD3vJ+xPgTxnXQZ4X1lwiQgn+ze6HuPDtwwMZn0tqWHFu,iv:+/s4LuBCJMNovQO9TPDu/fdCnBn2pqx1F9lvbgMKXYY=,tag:d+otgTxSW1aL6dd/Q38L0Q==,type:str]
sops:
kms: []
gcp_kms: []
@ -28,8 +28,8 @@ sops:
RWhQMzRGZlRtelNyNUEvNUkvL25CcWcKAcvpGL8WLnSsWJa0pItFmboMs+StqFEN
2AIAZuwEA5PHzWxD24/4zS5Hd3GSYMbQ1OHk4M4ua6iJhQ8sUxeccQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-16T22:53:27Z"
mac: ENC[AES256_GCM,data:EV9AZgBEBArocGRqhwBFbiM0n0bUd3PanHVCzrppmUELgwUVmtpAZzKvyChVi5ESt5cIlhXVN6xbb5bfymg2mmjnSLFHun3xLf6HRYknbFEDFwVSPwUEnLGRLy7G0gUaXrdIpkVt1jsuy1rQVWDcN4ec0TNT93VcCVXnR1zG0bg=,iv:pvqIvaDkLfgf36NmQty1zDkxOAnbJ7PeS47Vu3PZfs8=,tag:8Eum9tS7/FJmqi08bp55cw==,type:str]
lastmodified: "2023-08-08T22:29:46Z"
mac: ENC[AES256_GCM,data:PwKcf4huiMAcxtcbIvdL1NW8Ih+JDZi0ELEbD5+says/a+s3lohl9rNhdo8NPa+iwMrtXRBtfksl8eLZd/lk52LZY970V0d04e/e/C9g7LT/x6/QZBL74TxvAjzlpSPr5LIJ+ZZfoQLyYBUu5jYoQews3bXtjp5v5z7h/g8JaNY=,iv:sxPIHQC3jyphs5CeClrll1veJRR37gqoLilcmJ0LUNo=,tag:W763d36xkvJJFulhkEjkbg==,type:str]
pgp:
- created_at: "2023-03-17T00:18:41Z"
enc: |

2
hosts/hedgedoc/default.nix
View File

@ -87,7 +87,7 @@
secrets = {
"hedgedoc".owner = config.systemd.services.hedgedoc.serviceConfig.User;
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
};
};

8
hosts/hedgedoc/secrets.yaml
View File

@ -1,8 +1,8 @@
hedgedoc: ENC[AES256_GCM,data:gEDgoHFFEz0X7dJ4eiiG+U0sk5Q8mVR3T2jxqPFm09bmFSie7s6qakT7mGx7F3E12mjQAdBbKxk83DBd1rU7vZt0pxLwiXLcJ7IoWKZ3qtCdJMWtwhZNZUxnMWTqYCmr9Z8+E7JZDLXLGOpZM1qqcc847Glwb9oQqB8x5EgqRq8=,iv:P+xu/GNk5YkFpGTlo2kc1VB7KILNhmvnigVuzX5ZS+4=,tag:d5+VSykD1iTcQUp8FEj11g==,type:str]
restic:
password: ENC[AES256_GCM,data:KUrj0V8A3EZ0YdlE0uAwLvBE+piwH6/tFaX6OSQEqsg=,iv:mIBznBPIyUPHTA8TEK0hhuCmPQdv2rqhQuGoZAZNdF0=,tag:0X2QGR12M8vt8ZJ/2z1zAw==,type:str]
repository:
server8: ENC[AES256_GCM,data:prVsJ9b/4C7LWOE4lstYhvtTHdfAry0mIXrCkndwzv/yXtIIBmmFa0htg+eCsZ6ZFNC7DAo3VBzR7IgSK/1wkwzjzaZmpF4G2qH0x3rNIOoYmpkbv7LZJtY15HE0xjj9BRjEarox,iv:4b4MqOyqy8k0oj4SJsMiU9vccScGgxyclGHQZbhQQFg=,tag:oQvvPoIw/ufw3+/Gcua5EA==,type:str]
repositories:
server8: ENC[AES256_GCM,data:AzhoZqGX8bN8X04gKiOS3yVQAwp2sgTlzPSOMMBpTeLJLJNYgM+LK8fY3HSprYf/KMgF7pROlTmIBaEijyxEmepJSZhStMRZgvU9mLkxNZBMvylOe3N2ZVzLfokOazyxAExI66my,iv:hz95axaDuai8eLHGUJzkHrTQvBvTPDqNBtkOcgiBXE4=,tag:KpX+j/PqtYIxMYpj4OujIw==,type:str]
sops:
kms: []
gcp_kms: []
@ -27,8 +27,8 @@ sops:
NzNoTnl6bzY3N1pYbHRUK3RCMklGL0EKtvQpDWcknSSMkSxi+VJm4ICj1+cJAGg3
NE5vkDvXD6n+wxw3HMI5fiJnN5sE0/tAVcPhE75wdjmBm6FsuRqmGQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-18T15:54:44Z"
mac: ENC[AES256_GCM,data:WDdu3mjd9wCHIR4mm3rbjpdih0SpnkkAhGSqTrQb9YyVlA7eogeGD7eenLohSo4YsnRicZXeJDcx4GxFi52CnMZId++HvxEl6jmF4XTndqs00TbIwFhduD3mU/8v3fQIRxJbz009I2pA7ctZ6ZX00k7j93eJ3b/smlsw8x6bQJk=,iv:sod4zCO1xeECBdslWF1+pQVA0uGaWotwc87GeP3D0mA=,tag:ICU4S698WG7P0tbz33oICQ==,type:str]
lastmodified: "2023-08-08T22:31:10Z"
mac: ENC[AES256_GCM,data:aPb5tNKNkAcgrkgZYuncRYzxL9eOP+u96XxiojFmqP9ciIFHKiqR3SBbxaVryeXiDnkMsrdsjJ7rcjdQ5nrg0VM+aUBuStEudMzsenRd4pV5nSsgp4YtzWss4GJloRClUCp//q3p+RfczfMFJgYm8kjFzc0Gq0lpUbzhhAQ1qkE=,iv:4T5XAkSFME4owc1NjjMQjicxL594T7/fuwfg6H5gHGY=,tag:fAoBz9SdKyiYzpkzkJPQrQ==,type:str]
pgp:
- created_at: "2022-12-26T19:10:02Z"
enc: |

2
hosts/hydra/default.nix
View File

@ -311,7 +311,7 @@ in
owner = config.users.users.hydra-queue-runner.name;
};
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
"ssh-keys/hydra/private" = {
owner = "hydra";
path = "/var/lib/hydra/.ssh/id_ed25519";

8
hosts/hydra/secrets.yaml
View File

@ -18,8 +18,8 @@ ssh-keys:
public: ENC[AES256_GCM,data:sphILo6Xz3eCsIC0Y8fr4+CllH2nK42aijMDp5Psc5vhnxCuBxL+Zh4yT3NkPjAHMYZyAxp35uOGOjpOUNS+ii14C86WVTpWtiX3d52/1W5MK9SUGIBQrw8oGoqJeg==,iv:SlinQ+S0QEI6pMzUm8oJqJmlW11ULne2e73974RHiYw=,tag:QkFP9D3MsXM6OSPDqnKKOw==,type:str]
restic:
password: ENC[AES256_GCM,data:O5p3Nk6XN2NN2+H3toKh1P0txDAsskPA8+/7zYqahQw=,iv:fbT5m+wiR5LBffzECm3TV3WjstGJibeT41UFm4EjHk0=,tag:Zm0U2zum27YDA4jZl0E96Q==,type:str]
repository:
server8: ENC[AES256_GCM,data:j9gYfkG8h1zm0xZf9Z2rvQgzUI1Ul6Cq7CbY1dXGVUNLRr9z6vTObjA2Oq7OgOdakzypf3gdwptdC+L8CwZI+/axCckbHoN/U0S9M5LcVq7UtNk2DVujfllzbkAcvL8F,iv:asI3IoiVjenusVNHi4Y53E017nJ24cWZZfQm1ldeYr8=,tag:YwXyvuZfUOTqQhJcY9xbmA==,type:str]
repositories:
server8: ENC[AES256_GCM,data:yAm55dJJOXhdmnBEyOmtFwzNxCfwDY0tkzxacrqY/Zp7sKF1EcW7l0VHzx0TuMiq7LsV36I5cmreE75Ojuqlc+0e3CJx06FGhC/kn8gurPtQIFcJjGNa1Vaw3dIBOjeO,iv:rAEzp1j19TCeenOyRkAOmGEDg+HPwX4ePUHTr5MJ1XY=,tag:/2A5PCW/S8H/JK5pYo366g==,type:str]
sops:
kms: []
gcp_kms: []
@ -44,8 +44,8 @@ sops:
WkRmWkpEYVMrZ0tKQVgrRk5YU0grTFEK3cX9v11MK9LIw4w51hr2zyLP3biGxkdf
dl77D0IS9m2u0HipmzUs95m+z5j47hiX4Qo1Uza/sshwDBYyia4upg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-17T23:47:04Z"
mac: ENC[AES256_GCM,data:ABWZEgD/3+2TeKPxLyXf3L1o05BvHNNtIZhgJ+GTyVnZ5YHXpBihk7fkMv9K21kNbXAQ8JAV4eXF+WRczY0bet22Ng3oAolNGxNNqlU6Z0Ijy7PmOsbJ2Lgjn+p2p6zVJt+hSLTHttp33m2mgg+8jLuVJuLlxmuuCOEB/GCvXv4=,iv:nxnzG2SBFRCc+tb34LW/AW8Ci+WIXoN4ZdqUq8D72Gs=,tag:VE2QaRkMcLIDjGLqa1NuLQ==,type:str]
lastmodified: "2023-08-08T22:29:32Z"
mac: ENC[AES256_GCM,data:8NfVxYc7iuaedWYlHSq4ptk/uMzdEjNRJcNRq80kq9JlzDNwrKxJJwBty6rwq19+3Y2yvbv0RT5eNIVHloK12DJmoEOgMUKLCSf9loXTBwuGtiEceEMkkXfyRYrKp+jI9ZzBYddZS1we8cndjQkxxUzSJ9gXaS1+D0DCLfq9G9o=,iv:HOca0u4qO0KptAjy9zo2CoRKPUezki1ag3W04NxnXCw=,tag:G+2UCJ3qWu9xjt5OQbaoyQ==,type:str]
pgp:
- created_at: "2022-12-26T19:10:03Z"
enc: |

2
hosts/jabber/default.nix
View File

@ -220,7 +220,7 @@ in
secrets = {
"acme/credentials-file".owner = "root";
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
};
};

8
hosts/jabber/secrets.yaml
View File

@ -2,8 +2,8 @@ acme:
credentials-file: ENC[AES256_GCM,data:qr3X373dhIsYZxqbCROXRAF52tCPme3d0h6t5WI5YE0DBHj2RX/215OQdb2wgola+x4h/TnMGrVEGHBXsvpU0zwReFIWpMfJQkwup3eHkDVyDvptpB98DrhoA6nhRzfooOWwubYwdac32QybDa2WgnXtY+54h05DbDxpciqZRh22iz3JtPjnAAhK5hPy+bqHIdqoGs72mmScEgfqYVZ1LYYJ,iv:PELRmoyexdUSpcQ259CbFxNhhdqqe9gD1HpBY4ETm6w=,tag:/puZrWoYb/ligToMhB8uGA==,type:str]
restic:
password: ENC[AES256_GCM,data:8TuRqs393Ws0ggcI4tKXlx8Kt5Sq98zGK557/Qp8RL0=,iv:iWDbcEHUx6y5csLzSzspMtnGgHVZjKISUbs4mYihNA8=,tag:PWuSyrDjGwOo3g5Q2WT4Kw==,type:str]
repository:
server8: ENC[AES256_GCM,data:qn031fLyragVBSDuiyzZ9q84iBYK8VnwQj0waCZO26s=,iv:kQmHo9sRLu/e08/4NLzPe+HnmF/pRFJtFYZFvFvo4sc=,tag:ExtmNZp8r929uYMenymUoQ==,type:str]
repositories:
server8: ENC[AES256_GCM,data:1NeGxLVy4SIheVIBs3Xma2d3zheHpRMlmYk0MFaJErU=,iv:lkiWddZgmO4vUuyLs5Bk2FsPuUF5rfIwSp+w9oSBvJI=,tag:V/BCwLeAnIJiesCylTFcdg==,type:str]
sops:
kms: []
gcp_kms: []
@ -28,8 +28,8 @@ sops:
Z1N3bmlnSUQ4WU5oTkdoWTVoR0orV1kK63vCzyR3zc7vzeGG1YJDjtOAazznELp9
Wio0FQTlPyu44OOYzTcowjV/+cd+Jy0dC5jG+7KDoscXy8acHIbTgQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-21T22:46:50Z"
mac: ENC[AES256_GCM,data:RNkTC6+lyeuRR0oDLm4+N/PsOgy7HXHaBodXnsbuJgbOZH3wkhDFRekgBzHL3WEoi/+OX34gnXWEwQHhlTKWchJAxii7vXgfS/yKE3rWxrdzA5JRQanCQejtALEhkB9PbwiLK4824pC2gGuPteUkqQ1l2aG1D74AzZ4FJExFWgk=,iv:AbgnXrbrBq8t9heDcpr4M5ziKQxbmfkcf8b3YW53AWU=,tag:Exsti9zK8ypLaSL/UYZtGA==,type:str]
lastmodified: "2023-08-08T22:28:12Z"
mac: ENC[AES256_GCM,data:PbNnpFRkHYqAQKyPxuwDeG1DHQDchouEy2aC+49xKcjA8t+rc67eHo76LOpp0Un8ZUffQ9oox7RqnerGznIsQK2uU6fzn+RAQe2sYSVL0WFFGGWsArYJFMPVBN1p42/5/xuJJenN6v3ZqRnvOZc+KiEmNY7no3g7X0YjofXYELI=,iv:ikGE0Yy282bZnvg+Xd7fuDzGjzUeftfrv75fWMzJv6M=,tag:dMS4S2VwC4h0RJN9WcF+3g==,type:str]
pgp:
- created_at: "2022-12-27T00:46:38Z"
enc: |

2
hosts/mastodon/default.nix
View File

@ -165,7 +165,7 @@
"mastodon/vapid-private-key".owner = "mastodon";
"mastodon/vapid-public-key".owner = "mastodon";
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
};
};

8
hosts/mastodon/secrets.yaml
View File

@ -6,8 +6,8 @@ mastodon:
vapid-public-key: ENC[AES256_GCM,data:To3y0FkdfZNGpeVOMeyCyuuXMjHRkQjchQZrvhihGHtqZ4hhrTL8IWhKxznNZZgIf4GqlwKxujfLVNaO3JH/1losBWIg9H6n8w2tiCvBimmmLy5/kMxgoA==,iv:OR6+ncumdmOc59thNKICykpEjntucGr6FY6B1dl/koQ=,tag:Mk/Qc9VuU9R7MG6q74OJpg==,type:str]
restic:
password: ENC[AES256_GCM,data:chAXIgrx5xoy3+s2m9Kb2BjQhnAqMp2AcNNi1hTFB70=,iv:ZzfQqv6iAp3gh/jxqMI69uN7jpu+88hw/O6yYCZ+Z58=,tag:mQCL26Y/KjH9Eu279v6rxQ==,type:str]
repository:
server8: ENC[AES256_GCM,data:7HapKqLgOpgmCKVnZSf/8+wi+8ipCQM6AGtR25oObnJQnbu721j+8O0H45Xv6PZGib7k6guRnGO0vNO4iNmbfOO9UfjjAooUO+aV3o6ljXaLNvRXFELid9zmUQaXskS4Wqkt3l4b,iv:skAytH30A8w5+9bk1nikaYwcmm+XAUqipMIHhgMCXuM=,tag:AdaHjBrse6EQUdmQE3F0bA==,type:str]
repositories:
server8: ENC[AES256_GCM,data:ifoY4cBSgKAJAHPqMZ/BYb/l1BfE5usdzoTQtis3G3+OWjfkJLy9Gl5eHfkYYq3i6wJU9F6Iiy5XF7WAZ+PVof2QZG7qgelL3Je1i0vhMkbrFw/SzdagDUSp80PeSeaNsLsY+nUn,iv:ngCs/ihTGM0s1vRP+BBXBy/G3GxGq44tpSvfKMYJopg=,tag:UlZ73COEpqYKMlNvyls2BA==,type:str]
sops:
kms: []
gcp_kms: []
@ -32,8 +32,8 @@ sops:
OU1FcHVDb2xIenVIdm5kNUdjYy9GTDQKRmjJIq4yiWN4mLU/+rJfdsZZT2m41DD9
0xlVibN8UkR/uLfs1CxdYSTewFKXtJzDYcQR1vUyb3oLUxP7fghPAw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-17T23:25:47Z"
mac: ENC[AES256_GCM,data:inLu1QDMX3nDUcXsaVqBQ6psmJdYUEn3KU/KQm/giboM2c9lAAulNHDyz8a8ZAXEKbLmgRUX4fRYggrpIK8Kmvu86btB+OkBiUcHYS4r32Ms30us2H76krTxbiDanQxI0w1d+1Ta6B3VNLEa60xeICB9Yzmm9JuX+LILWghfJC8=,iv:l8yHD3/s/kOoC91e9Ubv1P110zorC0m8C4eK/sLRwZ0=,tag:Gwk/ZtMJGUqdGZX+M6UAwQ==,type:str]
lastmodified: "2023-08-08T22:23:53Z"
mac: ENC[AES256_GCM,data:O0dZOxE7umo+NCbmc1MOA9Vy7lbpVm/20nE9NjlETYX+meUgF1GLYPdzyZuePRwzvdNOrCGTBjYatuSBsBwPj4A7Co9/51AWbQJXMwJUcAxd30+eCSvEFiAt0qy6DTHxokE2bMKmdgP/Zh3LQy+ZWp5vY/Ua44SsJ5ldBltT/k4=,iv:e/NKsQjbW5gHJFQ66iGXJ5/MCBXdIVvFamLg2PGg4Cw=,tag:WiQN28AAIj9f/CnajJICnQ==,type:str]
pgp:
- created_at: "2022-12-26T19:10:06Z"
enc: |

2
hosts/matemat/default.nix
View File

@ -55,7 +55,7 @@
secrets = {
"nginx/basic-auth".owner = "nginx";
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
};
};

8
hosts/matemat/secrets.yaml
View File

@ -2,8 +2,8 @@ nginx:
basic-auth: ENC[AES256_GCM,data:VIjP7lqSmGxKswz1XDLxKp4=,iv:meyfO0gUjfqS5bRjnBMzR34UL0uLInvodv+8DS5IRnI=,tag:GHIKdh14N1JGWbRedr9T7w==,type:str]
restic:
password: ENC[AES256_GCM,data:ERBTYAMLZjBuQ7kbMRhsiUZAENBC/Yb/Ly9NV9mpBl4=,iv:V5zGRTioYEAFXUuPAtmyAG3vRDnB1zEivIMGdPww9uE=,tag:PrkyForMSeNzSz89n/CaVg==,type:str]
repository:
server8: ENC[AES256_GCM,data:Fw9XkRpUWfR8TCClB2rtNpkAqQ5QMaMRdM/KvP2s9sobGZ961fNQ4OwMWRBLINLZ4ZtwRNrZAK6PBUyyvtzYeEYxiYYNx0/H8wh/FFL+KgRV7cKxZYWdiY4vxhcIMZ+YN9kutA==,iv:RjwuYh5L8VEovX53HGvQmTl9jNiEEJFmOsmj3xbmj4s=,tag:VHWeCwIoxDRCTf9y/3rwcQ==,type:str]
repositories:
server8: ENC[AES256_GCM,data:ByBxo6lckBsNZVomLsCkqT1xCeWndOW9BD+4f4JgAg9Jzl9F164GGZw3DcN4sFuqnZ8EiF9qFhk2j+ZY14h0xgyNPNPqn694HtZL5VThuucl1YfXp/IxzTrjj/Ro23X089hqfw==,iv:YBe9bmi7CFSmvozhaW8mhmDW4FO7UqSxJafRHIJN2YI=,tag:xFUdCP7SYW3nsRMIBkS/yg==,type:str]
sops:
kms: []
gcp_kms: []
@ -28,8 +28,8 @@ sops:
QnpEYmxzdXVoM2lQaWJTRk5jUnY5ZTgKIiOCV2WB+R5LAgj6nyS/9dcqmN6FWIaN
SlQTSOzYFop776o7A9r109XtKi00ay4wMssZapTuyGaDkTrdgltE6Q==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-17T23:26:58Z"
mac: ENC[AES256_GCM,data:zHBrs3NYqKeJ1CSivf+thYIrnnxGUHN8QapKSegbi4TAs8n5f5t4VXGUUDCfSfsORV6EvoF1a2RKio1WKjdsQuZZDpKohXAZhWRHjSV9nqwcT91dOvy1dbMv20nqVJxuvLH0pTx7Kij7Npt9K8vOiVpZY5zP8+YO/NKZNm/jgpw=,iv:f/hwsIbJeyJKXDjSd+P6M4UT31N6vkH9U2BM28M1tLk=,tag:2EpQLyWGjzf4+DtVs6+2pA==,type:str]
lastmodified: "2023-08-08T22:27:38Z"
mac: ENC[AES256_GCM,data:scap6IH5C4bNe3prDaSA2VefN4bdRVXVnE9+0dsvUf0yum2Zvyo+c3tg7NLheFfi+7kpJNBJDqwvqdpx3h3GkU50QBY6EV7H40ObFXbQUr/CcahP8suBxZdRalLB8xhNferDoy0Ys0mv3U8HtnN17fpmhZ3Lr40xq22wrcWg790=,iv:wCQzoh9RY+tIwmI9Y1xSCY6n2yDz09gRqTf7NDIFr1o=,tag:3nI7LFy1k1G0rn0453uVCQ==,type:str]
pgp:
- created_at: "2022-12-26T22:15:56Z"
enc: |

2
hosts/matrix/default.nix
View File

@ -118,7 +118,7 @@
"matrix-synapse/config".owner = "matrix-synapse";
"matrix-synapse/ldapSearchUserPassword".owner = "matrix-synapse";
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
};
};

8
hosts/matrix/secrets.yaml
View File

@ -7,8 +7,8 @@ matrix-synapse:
config: ENC[AES256_GCM,data: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,iv:sb9e8avH/B1guuSiWMp3oTcuEiQMzkkAHGEPMysc7L0=,tag:eHDTwPEdiepYYkpvVfjL5Q==,type:str]
restic:
password: ENC[AES256_GCM,data:TjvEKs9ZMF08kH2L1M2zZvlM1B5itvNtTiLi2w9exyc=,iv:BXgRyVlZkOt7qUVxmuvqLmOBPHmlEGtbr/0gagd5FHU=,tag:6hZKzBfUBpiWhAVFjXe5UA==,type:str]
repository:
server8: ENC[AES256_GCM,data:7l6bESQG5Hh5P62jRbN7yKH7pQeI6nlmdRVaVUXXbbqPVq21J5LUAMtmfIiEaYJ5J53NLbvBEHea3mviyV3FvABcUeaZ//QALWlZoiN7T2sPeEwJWtcFeoR32vylF+vAUOI=,iv:B+GVtC+fVq5DY66z/gslLLFDQrxiYIbvxA5OQuejmAc=,tag:ve67thMr5CYu0SFO9fX5ZA==,type:str]
repositories:
server8: ENC[AES256_GCM,data:9xczasQYnu6l/RPBoGfe1LKg5s1HjzHeG9P9xEvv69yB+65+9lGYuexsC0n6+TU1e2AwhuzFbJ90hCVwIPfgLv7AmO68h3QOjEM6WPDOePj/tPAsiA3RWvdq1cAWhS205pY=,iv:oQotqTLh5C+842/7E4yG+tnZ1Rp6+4Cr4x5Tbqokd78=,tag:Id8i/she3k0r7ACTNttorw==,type:str]
sops:
kms: []
gcp_kms: []
@ -33,8 +33,8 @@ sops:
c1JVckphR2hmUmJUenZHdU9uQXJEcWsKPij9wBMFTEp8tg+co8Q/BT6XZbfNmkD/
6uIkL5boV/HDBxJY/Xm1P5HhJKSPbi0wGAq0RCfisXkO9SgJKM5dBg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-18T15:08:43Z"
mac: ENC[AES256_GCM,data:ksfFUf9QGZvPXRKrXWYlm5gY0BvI+rmthy7hUveTQejM4odA9kq20dwARK61yxjbW2+rr4b59/TBEHgRfGzs5KFNX2hir4UrEtF3Grqcw9aR8okseKgeXZAo8BjVQTGeUpGdm3huHGTXkTiKyM79PIHLS76F1+xcDOXcmedDIJI=,iv:DOrcvzRw+Py71I2Z/lqfB4s/xzFFGvx4vG9dVDWm9Ws=,tag:ZbZYFfC8JSNrBsUwkutdUQ==,type:str]
lastmodified: "2023-08-08T22:31:45Z"
mac: ENC[AES256_GCM,data:336Tw3RyMmjzZRMvjJXASrRSHpZf0iPpA1MMZ+Oyw0wNZlCNWlw1fJJpyb6heQQJTz8lWZK6pbGMhOQQU1WAywL7xbnFbuPcMrxUCpBiukq31WGMHjLUJQiHNVQJ+YOvD+jC4ovwaFPENbO3xaYig5PGyC6Txuwe48AwhqUSTbM=,iv:AX5K5U7GqJH19e/Lg4PfWSVTQMzqzK0EiYOT8wnHL0U=,tag:eklEckMU4XiV54llxFKmOA==,type:str]
pgp:
- created_at: "2023-03-23T23:23:59Z"
enc: |

2
hosts/mediawiki/default.nix
View File

@ -224,7 +224,7 @@ in
};
"mediawiki/upgradeKey".owner = config.systemd.services.mediawiki-init.serviceConfig.User;
"restic/password" = { };
"restic/repository/server8" = { };
"restic/repositories/server8" = { };
};
};

8
hosts/mediawiki/secrets.yaml
View File

@ -5,8 +5,8 @@ mediawiki:
ldapprovider: ENC[AES256_GCM,data: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,iv:q49SA9/vfnoIysVGE68LMf8dZ3/Cj7aEH0vCH/MAvJM=,tag:LJINBjCtMrAveBKY6mqz5Q==,type:str]
restic:
password: ENC[AES256_GCM,data:FwzTzJysad41gnMooiqPqiwveTfikSkA9+G5kYjdj78=,iv:EiEPWQBT5hRefkqTRhKOdtx+HK+634A1goCX7GSeOKw=,tag:MSlshF1SRsnSTANEcv40JA==,type:str]
repository:
server8: ENC[AES256_GCM,data:K4jQx/t5mquEGQ+K+XlGkoKLPMDNcAn+EphiNArLfvFspji+tcPapC/jjmA0QCw6MK9v2FZZHL3y81XY+oxOn+6uW7XlbRpeEE06uxDNaEIlYwFDsmetopOUJWPFPmDMwTyL1JjjVRY=,iv:W5zt9nJXQqHsMWU3nhZyoiIktT3klsV98ego+u7hj+g=,tag:GPiZDU0xWN3CT2W8oID9zA==,type:str]
repositories:
server8: ENC[AES256_GCM,data:V4ETiNiSQcBjCsV+Ku/QjG/EgxlNCqOjnRdtTT/UDXGQ9u4fARR0Kh7cB0vl7jtj3DNzEXykNSGnaIcG3ql8SjfEmSwUJWtN3z7TdfxBqFrC0bZEKBa+Mgy9V/Pv0u+4Fj2gWk/8v2I=,iv:RCUevFpT2AHMTYkMZxksshKCEifSb8geCE/ZVVzrN40=,tag:dGBW3KL3XFMQy/cQ7EyLNA==,type:str]
sops:
kms: []
gcp_kms: []
@ -31,8 +31,8 @@ sops:
dGFiNnQ2YjlYbE10VVY0TS9JSGoxVE0KIGxsQZ3NW8obnIud3H6s+zVNkiFf2TYD
8ddmsulRCZAtw3qRuNikMKAbNsE+foO0fLb5Cem9doOcXpcYIwp1vA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-17T23:56:00Z"
mac: ENC[AES256_GCM,data:0xUlHyfWpeVmGbC/j363RByhk0KUEP8V5w7YHmpMvBwezAmmnuAxpt+MpcmUCgmkfTdCsBUsVZGNqMO5He0vmP0LADrTscOw8ozCv9BqBXU29NvktbBxmx+cSkqXkkGJDB+lB2pLpbw8iUU2a/tk/w7UyB/iJPI50uIdr6fF5Tk=,iv:xitRxbzvv0rLyophVMtm5Sxv2pVUy7qP7uhWyiyiaHg=,tag:ryL0gpFJR3mWFeR2z7SrMQ==,type:str]
lastmodified: "2023-08-08T22:27:23Z"
mac: ENC[AES256_GCM,data:mK3GnfC1CuL4HXK+c4qbbN6fkxYqSsiaE5Bgfcb1JxY0e8ZcOacdwyR34RR48iKDsmCZdfD+M2qjdh107FngCzw56VJreju3GaOw637Vskg/4jYuwzyPZpUArzwDZsyTJOeapvFMoFRHsBcXPWdlkmxb9fDa7ZG3Sj5dC5JYAlY=,iv:HjdcAHHzZBgy39VezdzMacD5e648F6hyrp6lj9AQrgk=,tag:rWBXJrfkt8fp250iR9aJwQ==,type:str]
pgp:
- created_at: "2022-12-26T19:10:07Z"
enc: |

2
hosts/mobilizon/default.nix
View File

@ -53,7 +53,7 @@
defaultSopsFile = ./secrets.yaml;
secrets = {
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
};
};

8
hosts/mobilizon/secrets.yaml
View File

@ -1,7 +1,7 @@
restic:
password: ENC[AES256_GCM,data:VzlrvaX6A/TIPZHrFqQokAIB6nMWTJ1fvlANg+RkNjs=,iv:xcczjX3rDpJAmnOjQ4jvcmuAYAfoR4qRhhOVNZBn8qE=,tag:sI3hpyWOqjKi92oscWBTaw==,type:str]
repository:
server8: ENC[AES256_GCM,data:es9pjz9tIaoxxrjF3aGr+gqNQRKg2kgTATBcMcRzSvnnU7CTlOI7jZ5ij2ViGGW4FxPGOIM7Yakn5rUJipjqu3Bc5keDKDsgdsQ284v9URXMWw1t+dKKbUq3Pe73mB4v+HFH1gjqJtk=,iv:6b+HLJYa9uPpKYdDJtpqOxfjcbGVMX+jt5BU3qXJ2iQ=,tag:l2jen4ynpN9U4YMW4RWlJg==,type:str]
repositories:
server8: ENC[AES256_GCM,data:wrqLH4ashixAuwSX9GUjMow6s/T7odfFrlC2SEOHqptaNSjmcQVez63TeZMp00uZiFlCAGwhtEYYLuUHy5/IK9YEkFSVxejzfflJN1fjODlDrkjAoYdeFm4ycRQJNnjXy6aKP68lH+M=,iv:OTcOX+qiF/5bYT2LkzWDoRktxHd3478rjpJ76QEHHwM=,tag:bQuU8DhDGHU567zMhNSaFQ==,type:str]
sops:
kms: []
gcp_kms: []
@ -26,8 +26,8 @@ sops:
bnFuRXlycEE1cXlmNERDWjZROG16TzgKnbKHCu8FRFCej1YCtd9zueUM/n8K3F39
tU/NFH/sJwqZ7jem/Ljs5Bcp5939zyGmN0RF5MsBre6YrS740YopSg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-06-05T18:26:48Z"
mac: ENC[AES256_GCM,data:SO7Q8L7PvEcB9YHeLEUOHARnKOpP6fISMhEU0cFaPICDu3HyaNga+UzUz/5qnQa9qPxtny7NpzAFw3q/McrpShUaNkD6b8sMr7QqeGomKiGE2UVOEwdO0yZSF7dCpwTdONUlDCMDz3Ze68XlYXGsKwE3x9dpToFNBVey3avzqM4=,iv:sLjS1+5vC/E7RqGiDMLNGNlwKTyZN0P5h0biGNWWSyk=,tag:VtxzO4NANM6iRAaw/Lqe8w==,type:str]
lastmodified: "2023-08-08T22:27:02Z"
mac: ENC[AES256_GCM,data:tbfRE5x2gZYqP9EVUru1CXDq/sDCVfR4hamcJGN4gUj1o165yNhU7k6j61urExQMPpy2+KdYClPgrLyk3Bf4J1TP1N3cZnuGj52HiEL6zcKu+iuyYsp4AGtxp13R/a5T7x9M8kVLTgolnSJfWl/juEx6i0Z3tRWSBDmdHzutiBA=,iv:LBrF/IcmHemM9XbMxwtPJXHSMx6A5LtM4JCbdijG3ps=,tag:nYZLbUhpkTj3GhFZsdrtpw==,type:str]
pgp:
- created_at: "2023-06-05T19:07:55Z"
enc: |

2
hosts/ticker/default.nix
View File

@ -341,7 +341,7 @@
defaultSopsFile = ./secrets.yaml;
secrets = {
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
"restic/repositories/server8".owner = "root";
};
};
}

8
hosts/ticker/secrets.yaml
View File

@ -1,7 +1,7 @@
restic:
password: ENC[AES256_GCM,data:8tkLinaHpUCCLeHIUZhTJF3XR12FZ6MjZ+c4mVz0Sp8=,iv:qQcKp4+S0xQy0zyj68cncD5Up+tzrcgEZcues6OYrq0=,tag:d6biQlg8NqwKUxkNCDUXhQ==,type:str]
repository:
server8: ENC[AES256_GCM,data:N7sgLptPmXIKDpE0zxptQtd1KdlmnubM0egoqWnh/Eh86mQ73Pawep6r8EyaQt2mNnxobhbQdQFDXvvAZmP2umsqL/yVidtjK0VNldChlLg1DyuJEkMfkR381CLrQHTkIkA=,iv:TUP7RwlZB5Afa2NUAoGRlcy0XAB5VFJlAELt+Yu9eAs=,tag:876OlTFwzhmNkBkWBcAlXg==,type:str]
repositories:
server8: ENC[AES256_GCM,data:DMz0J8rKxy1vLazI8fv3R/OFJ0Yc8zu0CzmZOwVkfndyNsbGyZFqgOh02e0yVgU6PnsPPKX8PMXbA+9dDfJWMXyk87oDeORCRQ/wUibPsB7pDTTdpFq6UIyNWJ7KISV/nPs=,iv:XrxQBrtsbl15FduHPhRrrmoM5wVbir7C6jIQBJF2i1g=,tag:oqELIVGyXR3d9C+BcUADQA==,type:str]
sops:
kms: []
gcp_kms: []
@ -26,8 +26,8 @@ sops:
NmpmUUo1MEZ3RklZaHIwdlV6SWgwRUUKeVWntnZtBAol+qi0ErVosn1sjuDPX/7j
HrhbJ40sUXZhyBmKMZULRFIUaezHWHjCCurAG8T/WEZCgvkHcQrxTA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-18T14:25:43Z"
mac: ENC[AES256_GCM,data:QV06P3vOMbOPaQSMQr5IziRVuItdyWV0q3EIphhvzQAfpZPl63hL9ZXvJO5pM8Nce5416P823g6WE7qgLi6l0XrKWb/ZhBjPGLIYgvnUsFV05A0ce7BttEsbXp5ZRFUyqWOxht27/Lts5bL5DSgjHGXva9Pde+abewDLY/zlfl4=,iv:OcuycZFacTY3+ofvEXsPXNwJITpt4MTX8Hp3htt5zSU=,tag:8xdVsvciO/xQv81OXDVEmA==,type:str]
lastmodified: "2023-08-08T22:31:54Z"
mac: ENC[AES256_GCM,data:YsMOY2oyekLKt36mBhOaNThhqPNhlu78Na+iAQiX+lsKgbmzMklhiRJy1rQWyetWv60+TmUNRuFvQxrE2jhBHXudqEs0i2IF6NjeX972O+yUQJRxc4c6ydznPsMw8P2TzraBC1EQvycqTtQsalIgI9fLGXObTjQ/+0ENagE76fo=,iv:5APAXIXdz8L07OWo9v4q27+3xxr+hEML+BUhbqN8gPQ=,tag:65zmcCoAF1nonFyLry7IRg==,type:str]
pgp:
- created_at: "2023-05-18T14:23:24Z"
enc: |

2
modules/backup.nix
View File

@ -71,7 +71,7 @@ in
in
lib.mkIf cfg.enable {
server8 = commonOpts // {
repositoryFile = config.sops.secrets."restic/repository/server8".path;
repositoryFile = config.sops.secrets."restic/repositories/server8".path;
};
offsite = commonOpts // {
repository = "sftp://offsite/${config.networking.hostName}";