c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

jabber: add backups

This commit is contained in:
Sandro - 2023-05-22 00:48:40 +02:00
parent 8593ef3e2e
commit d8c95a05bf
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
3 changed files with 17 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
hosts/jabber/default.nix
View File

@ -49,6 +49,8 @@ in
};
services = {
backup.paths = [ "/var/lib/prosody/" ];
collectd.plugins.exec = ''
Exec "${config.services.collectd.user}" "${pkgs.ruby}/bin/ruby" "${./prosody-stats.rb}"
'';
@ -212,7 +214,11 @@ in
sops = {
defaultSopsFile = ./secrets.yaml;
secrets."acme/credentials-file".owner = "root";
secrets = {
"acme/credentials-file".owner = "root";
"restic/password".owner = "root";
"restic/repository/server8".owner = "root";
};
};
systemd.services = {

8
hosts/jabber/secrets.yaml
View File

@ -1,5 +1,9 @@
acme:
credentials-file: ENC[AES256_GCM,data:qr3X373dhIsYZxqbCROXRAF52tCPme3d0h6t5WI5YE0DBHj2RX/215OQdb2wgola+x4h/TnMGrVEGHBXsvpU0zwReFIWpMfJQkwup3eHkDVyDvptpB98DrhoA6nhRzfooOWwubYwdac32QybDa2WgnXtY+54h05DbDxpciqZRh22iz3JtPjnAAhK5hPy+bqHIdqoGs72mmScEgfqYVZ1LYYJ,iv:PELRmoyexdUSpcQ259CbFxNhhdqqe9gD1HpBY4ETm6w=,tag:/puZrWoYb/ligToMhB8uGA==,type:str]
restic:
password: ENC[AES256_GCM,data:8TuRqs393Ws0ggcI4tKXlx8Kt5Sq98zGK557/Qp8RL0=,iv:iWDbcEHUx6y5csLzSzspMtnGgHVZjKISUbs4mYihNA8=,tag:PWuSyrDjGwOo3g5Q2WT4Kw==,type:str]
repository:
server8: ENC[AES256_GCM,data:qn031fLyragVBSDuiyzZ9q84iBYK8VnwQj0waCZO26s=,iv:kQmHo9sRLu/e08/4NLzPe+HnmF/pRFJtFYZFvFvo4sc=,tag:ExtmNZp8r929uYMenymUoQ==,type:str]
sops:
kms: []
gcp_kms: []
@ -24,8 +28,8 @@ sops:
Z1N3bmlnSUQ4WU5oTkdoWTVoR0orV1kK63vCzyR3zc7vzeGG1YJDjtOAazznELp9
Wio0FQTlPyu44OOYzTcowjV/+cd+Jy0dC5jG+7KDoscXy8acHIbTgQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2022-12-27T00:48:33Z"
mac: ENC[AES256_GCM,data:foZWnamhQe0nGL+tliQjoaH5BJZzJl3uyH37mHxKRgGdQoY1T47jLnOcZrSYF6YBEy0YN4K0WJwDKBlCHNKv8x+SPuewOqBZjyONVn1rZZciJPjD/Eb/lP7J4bMroRG44fr8kWAScJR6NxhtuFsMBkRw6IWUJCRqm59WGMOA0nw=,iv:GETpz3YyuAYOue40a8D7jUTDAPv5jV3oVIetsLWy9KM=,tag:Wryo38fdXdfJ4WZ1OLu0fA==,type:str]
lastmodified: "2023-05-21T22:46:50Z"
mac: ENC[AES256_GCM,data:RNkTC6+lyeuRR0oDLm4+N/PsOgy7HXHaBodXnsbuJgbOZH3wkhDFRekgBzHL3WEoi/+OX34gnXWEwQHhlTKWchJAxii7vXgfS/yKE3rWxrdzA5JRQanCQejtALEhkB9PbwiLK4824pC2gGuPteUkqQ1l2aG1D74AzZ4FJExFWgk=,iv:AbgnXrbrBq8t9heDcpr4M5ziKQxbmfkcf8b3YW53AWU=,tag:Exsti9zK8ypLaSL/UYZtGA==,type:str]
pgp:
- created_at: "2022-12-27T00:46:38Z"
enc: |

8
hosts/server8/secrets.yaml
View File

@ -5,9 +5,9 @@ ceph:
osd.2:
keyfile: ENC[AES256_GCM,data:PwOm1GNXLUYVhjoTQB1Ne/X0J1OUeUBk3ucGJv2qgbgpJUH6sXR/Ng==,iv:q7JUhvn2jeyT55/DTepQTa4ocXl1zN9SdzKz1CO/XEE=,tag:lPsfERwCcfyjvaCWEd4e7w==,type:str]
restic:
password: ENC[AES256_GCM,data:bcGDbuNJCkC8RGGPnF2OBsNy8BNE1JDAvhPrsK4dsYud6vdWOETw4blWO2yR5mCeAfrW4UKqWEP1263qHZbq23aSuArHjO2ZQ1Kg2On4EtiwRQFNlalNXnTL2lM5Sb1vD/PKc6oe1vZKLVBM4Vy0++4K5BYlBR+JaS2BrtdTE/OYbkFW6YHt4fFflrC/wmZW2Dq9MBknIWo3Mpxrw/mJPr67dxT0ptshBlOYJ1k8PhzjLKkoZP5wQCJuce9GaxKRu0Z9dNWTVtITa07xUejv+IDfeiGuezHVP8n5uW6g+m5vBuAm3ruTuwdBvv+x1ESs3Rcz9xoIiOCXU0zYzWv1yCQyaRVKiHejMTMCba4beWktyX4tsFZPUNGY7pWg+JZlVavNQfhJ6gmyhfham9vOVlBwvqo62PMYYuRlW1OolVxLPt9KV+qe7J2wHkZItSIOKl1lLxIx6bCSInKO1LYnonNHPpzyWhuHxkJfWvT0vvKP,iv:3156atZH3DuO9TPdJPM4XvA+UPoPdNUGTsNf8rgqI6M=,tag:4HnpumkjXQleGFBIB8W/Fw==,type:str]
password: ENC[AES256_GCM,data:srAGp/9yMg+MUFSJHcTGm1Vo/9a1iIQ8gLHKfLIcJIi9j3ruHYlgPcLmRzGN48C9MCZePTYfljLiFRv0/TEvxoiIwLF3N8So+dPza/3PalzXZKn6Z48fg2k6+JfxcmLKt1WgFabUb3fcA0ZqoU+IWJ9IkvtNuFuSOytr9V4R1SpnJi/4+X/G9LQokXgZapxD2bjqldAOl4XnJqnYUfWzHNIdBziVt/sw1wGOJCoTd3ijiadjnNmcxstDGc3iD69bBX5m87wG4OxzVJT8H1IvJLL+U6J3ffIJzOvtUIJ1BdZQh0mVBBCyf3UAP+M9XvmaSoJvh9E24g7ywi+BFYYfuP1GXYy9W3PhTKoZzGAzrzRdWMI4Yjf6pitDk5eXWfDKszVlWKBGnegi3KtIgYfE1FtZ1/Xl0gAk/t9b4TUewN8kPbsOgdVDDGU5nA+rMkq0DXZBh7G45MZ9rQEcd40XA60P8PCo38Cttb/t36cWHqofHsVOkDEHwG+VXqhkz2r6Ic0N8D7TSqXP1+3yTQ12ommZOVVygouF7Q==,iv:U4SQFSUJxQ2aD91zFxalhphrKRp4lWDEESh3JVLED20=,tag:U3fhdw34+fkVOLvAgCrEmA==,type:str]
#ENC[AES256_GCM,data:wKIykk+mVh3I2Hyo2TZVftZxuPZzlAmPEIX41WO7eLka/03P01cTZQl6bmElMRprwWFY,iv:B1ujyiHpdDeNLFjntmRKaAEFknLVNzsxv52kTMx9hVw=,tag:hzyRxamPe7nSUoKFaUKJKw==,type:comment]
htpasswd: ENC[AES256_GCM,data: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,iv:FictsNkXTx1HP+IkvR091Geu0SWV8SonEBkY8WuByHs=,tag:GIxB9ZOmk/UQrl9B8tIB2Q==,type:str]
htpasswd: ENC[AES256_GCM,data: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,iv:AvbeDZlkQ+/N0QlOTjcDSQzUjQ0BQRsFN8DnzQZJ0So=,tag:1b2Km5nt1p4DMxUcjeIr7A==,type:str]
sops:
kms: []
gcp_kms: []
@ -32,8 +32,8 @@ sops:
bWl4MTZUak1Bb0JWRXhRQkR4ZUFnNHMKvKQnoxb3IC7jW0P/zewbR68yJI8Uzz7U
iPaL8MoOlmXPu5dHBSTwn39CpFR6bPxIDMHUn+y9gtCUrbIIJQAaQQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-18T18:23:33Z"
mac: ENC[AES256_GCM,data:ToL3CPeFwmWzn6Ei2sLGDMhSeCADrnG4TnT0jBp8d7KVkMlm4KSguAVSEO4m7VU/yJjvwCkaoAJ/IM+z++RxDt5YGvXFWdROtq1fEJk4FPLSMAnru2N849+fZgayfXZe23JWPPeWcqXdB7JuCJSziQSGdZEIW7sz8Zmy6ZE3klc=,iv:K7v48Fg91DOsVO5ndbkTP5jxKzCjhbfeDXAU/H8T5Zg=,tag:1vpMr8c5VY1HyhRZUMsU2A==,type:str]
lastmodified: "2023-05-21T22:45:59Z"
mac: ENC[AES256_GCM,data:z0tocX88YIcvmITRXmcMA6QuGY8pBHcsvZMgXOr6ESt0EdjHc2PlnE75dL9wZBkM85JkxxhU5hmJZYm5ofecx07q68v3hNgVl/0vjtrqLjh1kiEfhQyYt9hIZRfCzGfhUrzyChsEMA4HCrAuHHVzuws5P9vjDHYrk94xU8drVRY=,iv:22N+fo/fR/vkrMbc+SzHwwUnCRi6D7XEAf9e57F4g6Y=,tag:ycPxZZExtTYu0n0IC1XOVQ==,type:str]
pgp:
- created_at: "2022-12-27T23:54:07Z"
enc: |