cy/nixos-config
cy/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

borg: use new ssh keys and add -x flag

Browse source
This commit is contained in:
cy 2024-12-20 18:43:11 -05:00
parent d7392fbdfd
commit 2607254164
3 changed files with 10 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
hosts/chunk/borg.nix
View file

@ -31,13 +31,13 @@
passCommand = "cat ${config.sops.secrets."borg/rsyncnet".path}";
};
environment = {
BORG_RSH = "ssh -i /home/yt/.ssh/id_ed25519";
BORG_RSH = ''ssh -i ${config.sops.secrets."rsyncnet/id_ed25519"}'';
BORG_REMOTE_PATH = "borg1";
BORG_EXIT_CODES = "modern";
};
compression = "auto,zstd";
startAt = "hourly";
extraCreateArgs = [ "--stats" ];
extraCreateArgs = [ "--stats" "-x" ];
# warnings are often not that serious
failOnWarnings = false;
postHook = ''

3
hosts/chunk/default.nix
View file

@ -79,6 +79,9 @@
sopsFile = ../../secrets/services/gitlab.yaml;
owner = config.users.users.git.name;
};
"rsyncnet/id_ed25519" = {
sopsFile = ../../secrets/de3911/chunk.yaml;
};
};
boot.loader.grub.enable = true;

7
hosts/ytnix/default.nix
View file

@ -23,6 +23,9 @@
"wireguard/psk" = {
sopsFile = ../../secrets/wireguard/yt.yaml;
};
"rsyncnet/id_ed25519" = {
sopsFile = ../../secrets/de3911/yt.yaml;
};
};
boot = {
@ -207,13 +210,13 @@
passCommand = ''cat ${config.sops.secrets."borg/rsyncnet".path}'';
};
environment = {
BORG_RSH = "ssh -i /home/yt/.ssh/id_ed25519";
BORG_RSH = ''ssh -i ${config.sops.secrets."rsyncnet/id_ed25519".path}'';
BORG_REMOTE_PATH = "borg1";
BORG_EXIT_CODES = "modern";
};
compression = "auto,zstd";
startAt = "daily";
extraCreateArgs = [ "--stats" ];
extraCreateArgs = [ "--stats" "-x" ];
# warnings are often not that serious
failOnWarnings = false;
postHook = ''