From d8c95a05bf171c6d75420506deb2ccc1d47f112c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Mon, 22 May 2023 00:48:40 +0200
Subject: [PATCH] jabber: add backups

---
 hosts/jabber/default.nix   | 8 +++++++-
 hosts/jabber/secrets.yaml  | 8 ++++++--
 hosts/server8/secrets.yaml | 8 ++++----
 3 files changed, 17 insertions(+), 7 deletions(-)

diff --git a/hosts/jabber/default.nix b/hosts/jabber/default.nix
index e11cf8e5..1f7f2660 100644
--- a/hosts/jabber/default.nix
+++ b/hosts/jabber/default.nix
@@ -49,6 +49,8 @@ in
   };
 
   services = {
+    backup.paths = [ "/var/lib/prosody/" ];
+
     collectd.plugins.exec = ''
       Exec "${config.services.collectd.user}" "${pkgs.ruby}/bin/ruby" "${./prosody-stats.rb}"
     '';
@@ -212,7 +214,11 @@ in
 
   sops = {
     defaultSopsFile = ./secrets.yaml;
-    secrets."acme/credentials-file".owner = "root";
+    secrets = {
+      "acme/credentials-file".owner = "root";
+      "restic/password".owner = "root";
+      "restic/repository/server8".owner = "root";
+    };
   };
 
   systemd.services = {
diff --git a/hosts/jabber/secrets.yaml b/hosts/jabber/secrets.yaml
index 0f1d8112..ba25555c 100644
--- a/hosts/jabber/secrets.yaml
+++ b/hosts/jabber/secrets.yaml
@@ -1,5 +1,9 @@
 acme:
     credentials-file: ENC[AES256_GCM,data:qr3X373dhIsYZxqbCROXRAF52tCPme3d0h6t5WI5YE0DBHj2RX/215OQdb2wgola+x4h/TnMGrVEGHBXsvpU0zwReFIWpMfJQkwup3eHkDVyDvptpB98DrhoA6nhRzfooOWwubYwdac32QybDa2WgnXtY+54h05DbDxpciqZRh22iz3JtPjnAAhK5hPy+bqHIdqoGs72mmScEgfqYVZ1LYYJ,iv:PELRmoyexdUSpcQ259CbFxNhhdqqe9gD1HpBY4ETm6w=,tag:/puZrWoYb/ligToMhB8uGA==,type:str]
+restic:
+    password: ENC[AES256_GCM,data:8TuRqs393Ws0ggcI4tKXlx8Kt5Sq98zGK557/Qp8RL0=,iv:iWDbcEHUx6y5csLzSzspMtnGgHVZjKISUbs4mYihNA8=,tag:PWuSyrDjGwOo3g5Q2WT4Kw==,type:str]
+    repository:
+        server8: ENC[AES256_GCM,data:qn031fLyragVBSDuiyzZ9q84iBYK8VnwQj0waCZO26s=,iv:kQmHo9sRLu/e08/4NLzPe+HnmF/pRFJtFYZFvFvo4sc=,tag:ExtmNZp8r929uYMenymUoQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -24,8 +28,8 @@ sops:
             Z1N3bmlnSUQ4WU5oTkdoWTVoR0orV1kK63vCzyR3zc7vzeGG1YJDjtOAazznELp9
             Wio0FQTlPyu44OOYzTcowjV/+cd+Jy0dC5jG+7KDoscXy8acHIbTgQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-12-27T00:48:33Z"
-    mac: ENC[AES256_GCM,data:foZWnamhQe0nGL+tliQjoaH5BJZzJl3uyH37mHxKRgGdQoY1T47jLnOcZrSYF6YBEy0YN4K0WJwDKBlCHNKv8x+SPuewOqBZjyONVn1rZZciJPjD/Eb/lP7J4bMroRG44fr8kWAScJR6NxhtuFsMBkRw6IWUJCRqm59WGMOA0nw=,iv:GETpz3YyuAYOue40a8D7jUTDAPv5jV3oVIetsLWy9KM=,tag:Wryo38fdXdfJ4WZ1OLu0fA==,type:str]
+    lastmodified: "2023-05-21T22:46:50Z"
+    mac: ENC[AES256_GCM,data:RNkTC6+lyeuRR0oDLm4+N/PsOgy7HXHaBodXnsbuJgbOZH3wkhDFRekgBzHL3WEoi/+OX34gnXWEwQHhlTKWchJAxii7vXgfS/yKE3rWxrdzA5JRQanCQejtALEhkB9PbwiLK4824pC2gGuPteUkqQ1l2aG1D74AzZ4FJExFWgk=,iv:AbgnXrbrBq8t9heDcpr4M5ziKQxbmfkcf8b3YW53AWU=,tag:Exsti9zK8ypLaSL/UYZtGA==,type:str]
     pgp:
         - created_at: "2022-12-27T00:46:38Z"
           enc: |
diff --git a/hosts/server8/secrets.yaml b/hosts/server8/secrets.yaml
index bffd8048..41085bd9 100644
--- a/hosts/server8/secrets.yaml
+++ b/hosts/server8/secrets.yaml
@@ -5,9 +5,9 @@ ceph:
     osd.2:
         keyfile: ENC[AES256_GCM,data:PwOm1GNXLUYVhjoTQB1Ne/X0J1OUeUBk3ucGJv2qgbgpJUH6sXR/Ng==,iv:q7JUhvn2jeyT55/DTepQTa4ocXl1zN9SdzKz1CO/XEE=,tag:lPsfERwCcfyjvaCWEd4e7w==,type:str]
 restic:
-    password: ENC[AES256_GCM,data:bcGDbuNJCkC8RGGPnF2OBsNy8BNE1JDAvhPrsK4dsYud6vdWOETw4blWO2yR5mCeAfrW4UKqWEP1263qHZbq23aSuArHjO2ZQ1Kg2On4EtiwRQFNlalNXnTL2lM5Sb1vD/PKc6oe1vZKLVBM4Vy0++4K5BYlBR+JaS2BrtdTE/OYbkFW6YHt4fFflrC/wmZW2Dq9MBknIWo3Mpxrw/mJPr67dxT0ptshBlOYJ1k8PhzjLKkoZP5wQCJuce9GaxKRu0Z9dNWTVtITa07xUejv+IDfeiGuezHVP8n5uW6g+m5vBuAm3ruTuwdBvv+x1ESs3Rcz9xoIiOCXU0zYzWv1yCQyaRVKiHejMTMCba4beWktyX4tsFZPUNGY7pWg+JZlVavNQfhJ6gmyhfham9vOVlBwvqo62PMYYuRlW1OolVxLPt9KV+qe7J2wHkZItSIOKl1lLxIx6bCSInKO1LYnonNHPpzyWhuHxkJfWvT0vvKP,iv:3156atZH3DuO9TPdJPM4XvA+UPoPdNUGTsNf8rgqI6M=,tag:4HnpumkjXQleGFBIB8W/Fw==,type:str]
+    password: ENC[AES256_GCM,data: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,iv:U4SQFSUJxQ2aD91zFxalhphrKRp4lWDEESh3JVLED20=,tag:U3fhdw34+fkVOLvAgCrEmA==,type:str]
     #ENC[AES256_GCM,data:wKIykk+mVh3I2Hyo2TZVftZxuPZzlAmPEIX41WO7eLka/03P01cTZQl6bmElMRprwWFY,iv:B1ujyiHpdDeNLFjntmRKaAEFknLVNzsxv52kTMx9hVw=,tag:hzyRxamPe7nSUoKFaUKJKw==,type:comment]
-    htpasswd: ENC[AES256_GCM,data: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,iv:FictsNkXTx1HP+IkvR091Geu0SWV8SonEBkY8WuByHs=,tag:GIxB9ZOmk/UQrl9B8tIB2Q==,type:str]
+    htpasswd: ENC[AES256_GCM,data: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,iv:AvbeDZlkQ+/N0QlOTjcDSQzUjQ0BQRsFN8DnzQZJ0So=,tag:1b2Km5nt1p4DMxUcjeIr7A==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -32,8 +32,8 @@ sops:
             bWl4MTZUak1Bb0JWRXhRQkR4ZUFnNHMKvKQnoxb3IC7jW0P/zewbR68yJI8Uzz7U
             iPaL8MoOlmXPu5dHBSTwn39CpFR6bPxIDMHUn+y9gtCUrbIIJQAaQQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-05-18T18:23:33Z"
-    mac: ENC[AES256_GCM,data:ToL3CPeFwmWzn6Ei2sLGDMhSeCADrnG4TnT0jBp8d7KVkMlm4KSguAVSEO4m7VU/yJjvwCkaoAJ/IM+z++RxDt5YGvXFWdROtq1fEJk4FPLSMAnru2N849+fZgayfXZe23JWPPeWcqXdB7JuCJSziQSGdZEIW7sz8Zmy6ZE3klc=,iv:K7v48Fg91DOsVO5ndbkTP5jxKzCjhbfeDXAU/H8T5Zg=,tag:1vpMr8c5VY1HyhRZUMsU2A==,type:str]
+    lastmodified: "2023-05-21T22:45:59Z"
+    mac: ENC[AES256_GCM,data:z0tocX88YIcvmITRXmcMA6QuGY8pBHcsvZMgXOr6ESt0EdjHc2PlnE75dL9wZBkM85JkxxhU5hmJZYm5ofecx07q68v3hNgVl/0vjtrqLjh1kiEfhQyYt9hIZRfCzGfhUrzyChsEMA4HCrAuHHVzuws5P9vjDHYrk94xU8drVRY=,iv:22N+fo/fR/vkrMbc+SzHwwUnCRi6D7XEAf9e57F4g6Y=,tag:ycPxZZExtTYu0n0IC1XOVQ==,type:str]
     pgp:
         - created_at: "2022-12-27T23:54:07Z"
           enc: |