cy/nixos-config
cy/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

borg: use new ssh keys and add -x flag

Browse source
This commit is contained in:
cy 2024-12-20 18:43:11 -05:00
parent d7392fbdfd
commit 2607254164
3 changed files with 10 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
hosts/chunk/borg.nix
View file

@ -31,13 +31,13 @@
passCommand = "cat ${config.sops.secrets."borg/rsyncnet".path}"; passCommand = "cat ${config.sops.secrets."borg/rsyncnet".path}";
}; };
environment = { environment = {
BORG_RSH = "ssh -i /home/yt/.ssh/id_ed25519"; BORG_RSH = ''ssh -i ${config.sops.secrets."rsyncnet/id_ed25519"}'';
BORG_REMOTE_PATH = "borg1"; BORG_REMOTE_PATH = "borg1";
BORG_EXIT_CODES = "modern"; BORG_EXIT_CODES = "modern";
}; };
compression = "auto,zstd"; compression = "auto,zstd";
startAt = "hourly"; startAt = "hourly";
extraCreateArgs = [ "--stats" ]; extraCreateArgs = [ "--stats" "-x" ];
# warnings are often not that serious # warnings are often not that serious
failOnWarnings = false; failOnWarnings = false;
postHook = '' postHook = ''

3
hosts/chunk/default.nix
View file

@ -79,6 +79,9 @@
sopsFile = ../../secrets/services/gitlab.yaml; sopsFile = ../../secrets/services/gitlab.yaml;
owner = config.users.users.git.name; owner = config.users.users.git.name;
}; };
"rsyncnet/id_ed25519" = {
sopsFile = ../../secrets/de3911/chunk.yaml;
};
}; };
boot.loader.grub.enable = true; boot.loader.grub.enable = true;

7
hosts/ytnix/default.nix
View file

@ -23,6 +23,9 @@
"wireguard/psk" = { "wireguard/psk" = {
sopsFile = ../../secrets/wireguard/yt.yaml; sopsFile = ../../secrets/wireguard/yt.yaml;
}; };
"rsyncnet/id_ed25519" = {
sopsFile = ../../secrets/de3911/yt.yaml;
};
}; };
boot = { boot = {
@ -207,13 +210,13 @@
passCommand = ''cat ${config.sops.secrets."borg/rsyncnet".path}''; passCommand = ''cat ${config.sops.secrets."borg/rsyncnet".path}'';
}; };
environment = { environment = {
BORG_RSH = "ssh -i /home/yt/.ssh/id_ed25519"; BORG_RSH = ''ssh -i ${config.sops.secrets."rsyncnet/id_ed25519".path}'';
BORG_REMOTE_PATH = "borg1"; BORG_REMOTE_PATH = "borg1";
BORG_EXIT_CODES = "modern"; BORG_EXIT_CODES = "modern";
}; };
compression = "auto,zstd"; compression = "auto,zstd";
startAt = "daily"; startAt = "daily";
extraCreateArgs = [ "--stats" ]; extraCreateArgs = [ "--stats" "-x" ];
# warnings are often not that serious # warnings are often not that serious
failOnWarnings = false; failOnWarnings = false;
postHook = '' postHook = ''