notohh/snowflake
notohh/snowflake
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity

Compare commits

base: notohh:8a25f5c8d48a44531cf8a00a931e95f34fc822bf
Branches Tags
notohh:master
..
compare: notohh:1e3da21ddbd1652975a5cbbbc040ce2d6025b061
Branches Tags
notohh:master

2 commits
8a25f5c8d4 ... 1e3da21ddb

Author SHA1 Message Date
notohh
1e3da21ddb
sops: update secrets
All checks were successful
flake check / check (push) Successful in 4m36s
fmt check / check (push) Successful in 1m8s
 2024-01-15 02:41:58 -05:00
notohh
4397798b73
restic: update 2024-01-15 02:41:52 -05:00
2 changed files with 12 additions and 6 deletions
Show stats Expand all files Collapse all files

13
hosts/ame/services/restic.nix
View file

@ -6,6 +6,9 @@
sops.secrets.restic-ame = {
sopsFile = ../../../secrets/restic/secrets.yaml;
};
sops.secrets.ame-s3 = {
sopsFile = ../../../secrets/s3/secrets.yaml;
};
environment.systemPackages = [pkgs.restic];
services.restic = {
backups = {
@ -26,15 +29,17 @@
"/home/*/.local/share/.var"
];
pruneOpts = [
"--keep-daily=4"
"--keep-weekly=3"
"--keep-monthly=2"
"--keep-daily=7"
"--keep-weekly=6"
"--keep-monthly=5"
];
initialize = true;
repository = "/nas/restic";
repository = "s3:https://s3.flake.sh/restic-ame";
passwordFile = config.sops.secrets.restic-ame.path;
environmentFile = config.sops.secrets.ame-s3.path;
timerConfig = {
OnCalendar = "daily";
Persistent = true;
};
};
};

5
secrets/s3/secrets.yaml
View file

@ -1,4 +1,5 @@
sora-s3: ENC[AES256_GCM,data:znp8K3XIHjKe5RpYTDZ9aNbA//fMlIDMkSUD3RWDs5DSOSHDFdS3+g9xpPJcrHfy/xI9+td/seY05dYBePMURuWhnlmNKgvGv5R3r3CYPs2MBSbYemfDDiKJdjWH8SIYEx9GAWm2,iv:QUXA7lm/kdzJDeDvJfp4xSeKfrokOXldp7ZNaQM3Nyk=,tag:t/vnO4EkWkVdWTgEDC/QYQ==,type:str]
ame-s3: ENC[AES256_GCM,data:7yAibzwRnj3ntwSC/zDw/k2q+bacsUMl4byNq96hGDYeEoBnjo0hrjtA5Sm9hzKY5Aa1j52AONdYZ3p2M7RW9lzCKt4W5/0YBenI7kUWMFVDQfR18Z56MlcNtgyIGnxdK0NXS5jZ,iv:XMI6hkQ36H0RqTvzlqgloMT1BI0TKz5hJlI9hZ+GeEo=,tag:kVviHYX3jh8gTjRHxC7fFg==,type:str]
sops:
kms: []
gcp_kms: []
@ -14,8 +15,8 @@ sops:
bE85dXI2VVN1Z2c0ZFQvdkQwM3FGbUkKWy5O+mqHTokLVV5FQ4UziVBadxpymX9D
BHUoDve8WgKFkRCY46ibnYofIumJqYRiHXPSUN46QQMg0GDma3jWRA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-01-15T06:33:26Z"
mac: ENC[AES256_GCM,data:zdj5OyDS926jpN2XLbKOzawbjhef6ik+9SvC3BFNvTId8KdlLoTy63YdHDuA6u9MPw0WNV1SYK7enyUJP+ZRzHk9hljwYzaXjC7PLGVoFssZ6nzEC4zk45fwTyeezL6f0IyRsenwB/2wmp+9N6sdWlLRHbLyVB5tVyUFV1VN+f4=,iv:Toshzs/ymReZkc6CRDmdXOUgumGmZSWwXenKWeNLJ1I=,tag:1kEzxhFwJlLFeQ59FH/ytw==,type:str]
lastmodified: "2024-01-15T07:39:16Z"
mac: ENC[AES256_GCM,data:qAwtUv3U5d0oY5GeiWoirZZsDpfEtgrgqxYHZvfbnQq9AMA7YERNjY4bvmwRQgmq1ZQ0F8E4opa6k9d+eeOCRqExip1Y8RI6BjuiMg6Ksn1lLLfGkDWDXeu8s4XILXKYkV5pZOqsnvdKo9dzCiiVGHTMFxRy8wXCbNaAPsjFaFI=,iv:kVl4GjwKaJMVNJohwiCAD64ogGkLC+jjQkS8arUslI8=,tag:OATDDGBiwT7boXm6OpJCYA==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1