Simmer/nixos
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add backup for diphda

Browse Source
This commit is contained in:
Ethan Simmons
2025-02-01 21:07:55 -06:00
parent 9c26cd9dc5
commit 1ea4d41852
2 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
flake.nix
View File

@@ -160,6 +160,8 @@
repo = "t643s856@t643s856.repo.borgbase.com:repo"; repo = "t643s856@t643s856.repo.borgbase.com:repo";
excludes = [ excludes = [
"/home/eesim/.cache/" "/home/eesim/.cache/"
"/home/eesim/configs/mc-distant-horizons"
"/home/eesim/configs/mc-arcadia"
]; ];
key = "/home/eesim/.ssh/id_ed25519"; key = "/home/eesim/.ssh/id_ed25519";
passphrase = "/run/secrets/borgbase/nix-alpheratz"; passphrase = "/run/secrets/borgbase/nix-alpheratz";
@@ -189,6 +191,19 @@
options = { options = {
openssh.enable = true; openssh.enable = true;
backup = {
enable = true;
user = "eesim";
paths = [ "/home/eesim" ];
repo = "ssh://p9h977h3@p9h977h3.repo.borgbase.com/./repo";
excludes = [
"/home/eesim/.cache"
];
passphrase = "/run/secrets/backup/repo_password";
key = "/home/eesim/.ssh/id_ed25519_borgbase";
repeat = "daily";
};
networking = { networking = {
firewall = { firewall = {
allowedTCPPorts = [ 80 443 3000 3843 4533 6600 6722 7474 7878 8000 8080 8081 8083 8089 8096 8120 8181 8443 8787 8889 8902 8989 8998 9000 9091 9696 11112 13378 24454 25565 25600 ]; allowedTCPPorts = [ 80 443 3000 3843 4533 6600 6722 7474 7878 8000 8080 8081 8083 8089 8096 8120 8181 8443 8787 8889 8902 8989 8998 9000 9091 9696 11112 13378 24454 25565 25600 ];

5
hosts/diphda/system.nix
View File

@@ -20,8 +20,13 @@
defaultSopsFile = ../../secrets/diphda/secrets.yaml; defaultSopsFile = ../../secrets/diphda/secrets.yaml;
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
secrets."backup/repo_password" = {
owner = "eesim";
};
secrets."mc-arcadia/repo_password" = {}; secrets."mc-arcadia/repo_password" = {};
secrets."mc-dh/repo_password" = {}; secrets."mc-dh/repo_password" = {};
secrets."tandoor/secret_key" = { secrets."tandoor/secret_key" = {
owner = "tandoor"; owner = "tandoor";
}; };