cy/nixos-config
cy/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

make yt privy to rclone secret and rm grafana cause prometheus chokes

Browse source
This commit is contained in:
cy 2024-12-30 15:55:59 -05:00
parent bed60c09d7
commit 672fe926be
4 changed files with 23 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

3
.sops.yaml
View file

@ -71,10 +71,11 @@ creation_rules:
- age: - age:
- *chunk - *chunk
- *cy - *cy
- path_regex: secrets/rclone/chunk.yaml - path_regex: secrets/rclone.yaml
key_groups: key_groups:
- age: - age:
- *chunk - *chunk
- *yt
- *cy - *cy
- path_regex: secrets/newsboat.yaml - path_regex: secrets/newsboat.yaml
key_groups: key_groups:

2
hosts/chunk/borg.nix
View file

@ -4,7 +4,7 @@
... ...
}: }:
{ {
services.borgbackup.crashRsync = { services.borgbackup.jobs.crashRsync = {
# systemd.timer(5) # systemd.timer(5)
persistentTimer = true; persistentTimer = true;
paths = [ paths = [

3
hosts/chunk/default.nix
View file

@ -21,7 +21,6 @@
./redlib.nix ./redlib.nix
./vaultwarden.nix ./vaultwarden.nix
./wireguard.nix ./wireguard.nix
./grafana.nix
./tor.nix ./tor.nix
./conduit.nix ./conduit.nix
./immich.nix ./immich.nix
@ -41,7 +40,7 @@
sopsFile = ../../secrets/services/ntfy.yaml; sopsFile = ../../secrets/services/ntfy.yaml;
}; };
"rclone/config" = { "rclone/config" = {
sopsFile = ../../secrets/rclone/chunk.yaml; sopsFile = ../../secrets/rclone.yaml;
}; };
"vaultwarden/env" = { "vaultwarden/env" = {
sopsFile = ../../secrets/services/vaultwarden.yaml; sopsFile = ../../secrets/services/vaultwarden.yaml;

29
secrets/rclone/chunk.yaml → secrets/rclone.yaml
View file

@ -9,20 +9,29 @@ sops:
- recipient: age1eg6sxflw6l44fp20sl068sampwd95fm0mnh4ssegrhtktgm50ptqcuspyn - recipient: age1eg6sxflw6l44fp20sl068sampwd95fm0mnh4ssegrhtktgm50ptqcuspyn
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqbEgzQ2dZdkR1SWhwQlpL YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQSU9IV3RtbVliMHNyT1FJ
bEx0MXR1N21WS2IwNVBqSTZOYmJxYTRybUd3CnY2N01wVFM4cnoxYTZISWRhc1Ex MnpncUE3RWN5TlpYQ25wWDJ6RmJ0M3liMmxnCjQ2NEJtUHBJTXd0RU5QdmZyZk1q
VWNBYjV0RWwrVHJrTVZEY24yWDhrSWMKLS0tIFpwZlBxZ2Z5bWhPZTRHbnZrOHp5 Vi82L3dqbWpqWERXajhucEM2aEFuc2cKLS0tIFRpRHVZaWV0QnhYcEdKY3JacHBo
NVptOUlMZWdlSWh6WTA1Wmx1Ly9VOUUKDYYI6SbnZ1y9w3mNXAtrf6FaNwNEAJri YzJ4U2tRZCtKZjNoOXJBMk5VMDM5dXMK9icftp6g+wA+TMDvDojmLemL2lSTlC2F
HH8YrsARrAUTNRpO6OkdOfuWuQRiHAGkFHyic+p99m78nYfZzAaxHQ== Qfp1mFhzGnyV3KPhrZ268tqtPXzxuIAkkIJpMunt/xIPGyiVC1GG3g==
-----END AGE ENCRYPTED FILE-----
- recipient: age1sy0at69err83qyml2vqu8xvwjccfws447aaadfvacj2qluw3p45s2mtrw8
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLRVZZNzRZZ1hib2RDcng2
WlBINkpmekRoWlJjRkFBT0ZYUWx4THlPZERFCmxpNmg4M2UwdGpJWWpFOWZZeGhz
bGI0cGN2T0ZzMGF5NlVrZ0lobWp3UWMKLS0tIEhYREplaFNQYmptZldudG5Xbk5k
TExmcTVmYXBWK0x5d1d6MHh3dG1mVW8KJyAQMYa769ptSDFU0y1+QA642ggsl0YJ
CDESVGHgFWY2wigkVC3CwDMKimSdANGeVfwlYn/fnHMHghAJ5tT3Hw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age10h6pg5qdpc4t0rpmksfv788a57f04n83zgqaezkjjn65nkhv547s0vxfdn - recipient: age10h6pg5qdpc4t0rpmksfv788a57f04n83zgqaezkjjn65nkhv547s0vxfdn
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCNDMxR2ZqZUs3L1p5UWFy YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGYldPQ1Z5dHZxVlBaUzA2
cUxVVzl3eXhNdEdKVW12M0o3dkluaFpwR2g4CjgwQzlONFpWRnhYcDV6TUh0SE5Q YXNBV3o3aVVGbUdrSmF0R2E3K1FQa3V6OUhrCkFKMmpCNExVL3g1cERRRmVKbC96
dzk0MHpjUVVrai9rUEZIWU80c3doT28KLS0tIG5tUzNVeFNtM0RUYkYrZllDWkIz K2lab1RIY1ZTWElxcHJnYWNnZHhtNEkKLS0tIDM5TisyakxOaVdWd2hXWDFwVlF1
SFRuTGtCQWY0Si9ndlYyVTBlZUhlVGsK+xw1uyjf72JxqvYaA+eJXycGqm62J9kh aExPM3ZCL0kvMWpZZlFuTGMvU0pQNEEKTxkA30B3nPOO1Q0ZRiZZKicqvEpJoOL5
WVkbwEFE3Z27N/xVgKw4kTFO/ZqrAx9dsF2gPB2wSERJ5ndzR5mzsA== B/PchzkTvSbjPGz55r+Qq3oTHTQ4bwxpZ7T1hMyMcXhws+oftol5/g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-12-27T00:29:50Z" lastmodified: "2024-12-27T00:29:50Z"
mac: ENC[AES256_GCM,data:OdFzyPSxUv+nKUC3OFfcvDuP/z6z/94O9nTRoBiEhsjKK30JhjuPSZL/N3AiWM0gEhqLBcvZgWpalKEc5dOJVQTOAm7Koz7aMK8Oi2OxCFeChKnIHnyTL3i194IbcjBzIV0TcU97WRNS1N5+8hSXLsBdStd+XiwCAspOQf8y1uc=,iv:FDoyspPtWf/a47Z6KXT+d71eLRWs0bzBc47rGrAqzx4=,tag:S51hhNAg5ojCCvkHpKIo2g==,type:str] mac: ENC[AES256_GCM,data:OdFzyPSxUv+nKUC3OFfcvDuP/z6z/94O9nTRoBiEhsjKK30JhjuPSZL/N3AiWM0gEhqLBcvZgWpalKEc5dOJVQTOAm7Koz7aMK8Oi2OxCFeChKnIHnyTL3i194IbcjBzIV0TcU97WRNS1N5+8hSXLsBdStd+XiwCAspOQf8y1uc=,iv:FDoyspPtWf/a47Z6KXT+d71eLRWs0bzBc47rGrAqzx4=,tag:S51hhNAg5ojCCvkHpKIo2g==,type:str]