diff --git a/.sops.yaml b/.sops.yaml index 4966beb..3cfb014 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -98,3 +98,8 @@ creation_rules: - age: - *chunk - *cy + - path_regex: secrets/services/garage.yaml + key_groups: + - age: + - *chunk + - *cy diff --git a/hosts/chunk/Caddyfile b/hosts/chunk/Caddyfile index a42032c..0bd1e38 100644 --- a/hosts/chunk/Caddyfile +++ b/hosts/chunk/Caddyfile @@ -65,3 +65,13 @@ cache.cything.io { import common reverse_proxy localhost:8090 } + +s3.cything.io { + import common + reverse_proxy localhost:3900 +} + +admin.s3.cything.io { + import common + reverse_proxy localhost:3903 +} diff --git a/hosts/chunk/default.nix b/hosts/chunk/default.nix index 38fbaeb..074cc81 100644 --- a/hosts/chunk/default.nix +++ b/hosts/chunk/default.nix @@ -25,6 +25,7 @@ ./immich.nix ./element.nix ./attic.nix + ./garage.nix ]; sops.age.keyFile = "/root/.config/sops/age/keys.txt"; @@ -85,6 +86,9 @@ "attic/env" = { sopsFile = ../../secrets/services/attic.yaml; }; + "garage/env" = { + sopsFile = ../../secrets/services/garage.yaml; + }; }; boot.loader.grub.enable = true; diff --git a/hosts/chunk/garage.nix b/hosts/chunk/garage.nix new file mode 100644 index 0000000..b88b870 --- /dev/null +++ b/hosts/chunk/garage.nix @@ -0,0 +1,20 @@ +{config, pkgs, lib, ...}: { + services.garage = { + enable = true; + package = pkgs.garage; + settings = { + data_dir = "/mnt/garage"; + s3_api = { + s3_region = "earth"; + api_bind_addr = "[::]:3900"; + }; + admin.api_bind_addr = "[::]:3903"; + rpc_bind_addr = "[::]:3901"; + replication_factor = 1; + db_engine = "lmdb"; + }; + environmentFile = config.sops.secrets."garage/env".path; + }; + + systemd.services.garage.serviceConfig.DynamicUser = lib.mkForce false; +} diff --git a/hosts/chunk/rclone.nix b/hosts/chunk/rclone.nix index 8f8af57..4665b49 100644 --- a/hosts/chunk/rclone.nix +++ b/hosts/chunk/rclone.nix @@ -38,5 +38,22 @@ ExecStop = "${lib.getExe' pkgs.fuse "fusermount"} -u /mnt/attic"; }; }; + systemd.services.garage-mount = { + enable = true; + description = "Mount the garage data remote"; + requires = [ "network-online.target" ]; + after = [ "network-online.target" ]; + requiredBy = [ "garage.service" ]; + before = [ "garage.service" ]; + serviceConfig = { + Type = "notify"; + ExecStartPre = "/usr/bin/env mkdir -p /mnt/garage"; + ExecStart = "${lib.getExe pkgs.rclone} mount --config ${ + config.sops.secrets."rclone/config".path + } --cache-dir /var/cache/rclone --transfers=32 --checkers=32 --vfs-cache-mode writes --vfs-cache-max-size 5G --allow-other rsyncnet:garage /mnt/garage "; + ExecStop = "${lib.getExe' pkgs.fuse "fusermount"} -u /mnt/garage"; + }; + }; + programs.fuse.userAllowOther = true; } diff --git a/secrets/services/attic.yaml b/secrets/services/attic.yaml index 82b0f57..ffdee21 100644 --- a/secrets/services/attic.yaml +++ b/secrets/services/attic.yaml @@ -1,5 +1,5 @@ attic: - env: ENC[AES256_GCM,data:kwQltWs8MMEJ9SEz/EIKoMNy1DDfz/tCsCVYNkvCy3/m/o8uXtgwc/F3QKBD6Gwc4P27e7Bv1w1ZpBqwHDS5qe+YD5gEg6Z7JSXKaJlG9AAZhOOhg/Qyqib7HTw/bZQH77QVxo/KwEaHzId6IGoUKAS0kimiyqOV2UiAN0O0JZtaWIkC9WmoTcjr+z/2x4mSFJJnRzS7u4wQj6Aqnuc1fmePHcsehy/8hyhD36E9jHm60LG4MgZKC44i5U+FqlidQg1/Jl26pblbGhdWnFu52YdnuguIttumMdGJwgvj9uu6p5bHF7QSbmmx8GlMx9xG0ogq2mi/FClvfd//BRVAOd/5+fcbptt/NRfawCUrxqkUqyj/v3WSym/HtQ9+EZ07vScl4ILnswWQ8nw4UlZSjhDhTuZ1WB5iSANZYmRoB2weSPAKNWqYodwXOR4dFyuj6lJXi7lIBlUzkgA/1q+gsKS+VBhNg8TvuBPpvmN0YlkVPn8xjShM+jcQJF7aeXymW4EjGe8ctraU1cRiC3Hn8dVuODKccSqgJK0AD0SjdCXPjM+drUm5D3BLF/gLNJsEprz+Sirkb0tljapLoR1Zc9CwPeX01wmVKZq8nYqSAEwAiJYYUb0HcO9HMFbWLkw8GNIvKhoKq2NW2zo+Fxc3Wm8vTSieji4TJd8v6cmdFeE4e6i2PPr0m1zxupIvCXCi9ZUT9lvmYlM7kZK3FZYa7rW4i9D5TFsD1K7E1uRRWdqQbnY8vJxpXD7fyRuwz8cqDEyX3me5vT4fNxSbQIr0PS3YW09ijagY9kTn7PkRLDB4Zzswe4yLybWCqHVsuvUlFaOA9M9WQWTxdooHcENtJRADRFdS6fx5QTMcugGMFGYrGt37LDhE/xasGO9GpS6EpoaO81EvSMgobVqHcQlXFjk/+645g+fx9Y9sN3SOB5CBNz9BOsyeTL27coNwAvo+NOCOHZ+3rW2voiU9ybHWgujySyKqxAHZjJ18KEvFv0mWG0thuftL4+hx8sxJ2HfjawlIt/YcXHRP2CpmVICQcJZle7UUYCqDR5On/NTHzAABe4SRBunGJP/2jZ3Qg5dRkxJr0TZStCJT7TzO2R1+YafhOSJIATQN4M9FP0S3GU1e619xKRroupmBducCSDB/fUgiGoN+rGXFadPs7bZc1BmGKwDHBvJ29OrQT2oPsdUTHGo1KR/cWNIvkqJAIsa181hMgz7GiW8DwENkvlY17KOEOnCQcsLHO8Hk1B8g/kWlowPjGnvhK5cI5NvZmej5B77uNPjZy31ZR2Mpt6O/k0wtpdl03ooSdr3MsmR1oChD2oAhpvoYzC7vvhJsd7r1EGUZdo087WZWN0Chmjg/7aFDmcu/dtfkvl6lSAtFog46MgmMcFFjkEMiIIs3SmY00rrhdqWHoT4nARwQkqy3GkrAykyxyu9/WpTf77CVNiKKiLAJNpkEqPmHRYj5tXHDjw1yK/sp+TRe0vn45DJ+ZRfsySmb/5YeME/nioIBNkETh6J1hXj9BMtXyXmz1G+/RlvUDxQMOxW9UqvD3N1sukQ5dHkjiteY0TaJ05OAMSxIk7XRdomljjLA8FF+CvhH5bbpZ5IpkKYxa4IPzxBx4y5JeSpujke8nMGjV5ulqLkFchua8UQPzYABpGoDrOKmWs7ZQoUzQULbsy5INhCOiDKV82Pl6CI5zgBh40d+RKCcOLd8fCaxB3m4NiHio9+nXM7/MEIQFXrpHLrYo8WXgm1L8ik1Gi+8gPP1VcwoX4a4z0tkSID/UnZqWOCVP/URW5D563iG0xl4Mvc55xgyp6Un82higVLWmYkW04ta33pCvu/3RcEAuRAU1Z7a4dq8CacQbqTpHjNw/bArI+hxHODiAPv3DU/jfhhyn/JMDOUnObjNCWxnfpYBJu244Rgmm8CS6YSCxsswnjMmG+rHtPbaOe3FDH2RzdXtRqJ7JxQdPQcV6Pi5bwQAc89vi7WAe94IziFWFQaNDBJc68J/881cGhGikV1mCW4AV26mVbbbrUZo6frKTelBDufD4J/ISPUmCFPppc+uHhCoqdXZ+ONPP00HR1ka4pubzKz+LOQh1G6Rf6PtdfbK/g60RkjhQ/xtA0fRt4O2CIqRZ46Xmyx9jO08zJIW1B+mSpAKWVyZ+ZSqo8x894/sHLWfIsjBIybe6nB9xzLo4hbc3DQpFUNlwWZFpKEFtdNl2/Ww+U4hdjLLZpTQAPbUUjlS/jcAJT2tNMsi7ujy8xgdsbRUp6QpxE9LVl1ChiwQVwwKNHimt5sFlYp8H6j9LUuoL8kIDPRi/9govHrP39GkS294MFjyHeHhZlwfbFrHO1+UowTbl1qTh+YG9/NS3ZN1dAEJs2ZD9AxRH/6m8Cbi1LH+LzZm/0kmM4HgJLqzoTmsB5YjiWA9P6ORbdeM0+4o+6CjuihLOzmc7GMDzeidde4uvoCbKCAsJh8iTEsgGbTHvCys/qo0G5goL+DispSclZwU64tGhJb7SgZCPkl4+2+qFMgjKJ3PO7IodBqETwL3poAEknbwXCuuFNLpDJymwt9G2F86Neky/G1Npsswc6UiKJSzEvyDSR+inxlSuD7MRJu6ujuMdqtBMhTKObHvu/JxE+zVHF3aePYnk78xHTLKl2C7NAVR5/sD3tvo9uxX7SuYWjDcYYIrH/DuWhAIvwBzFEO8tsDGPfg65cF691FOQmuKHWWTJx3tNgoQYelfyoxRI8ao9dIY6Jcwf/FB1NUQr9iw/sfn+w3ojqBqpin46f6xrSc40WgrnQibEoPk1bvK6aZvXYWpdOv/7C29X6amnOBvlCvt+T4/WpXPO9qM/nu1MvFI3ZtNRnJViRRMxjw9wbxxVXPmXD5BqW6SZTI1W03IAu7hNz3aHELB8vZBaAdZ8jGRw+vYsoopjMTFNW/98HVwlRlcz4x0V0FKls5l1FI55rSHjDOLUZdsqyot66TkT5wZ7HHUIFt8MsaXSjZIKRJ166d4Z3435VKWog6LqDrpFiShwRTJpMWNVJNWQLT/7f8clvexqk7v5u6q7C7mq8rOA32UlRFKg3O9ruI8iutyhp2QYdFM6p2l256Tr+Lf3AL7hNA6GSt79Kb9DxXnBl7+IP7vQTZhUDU/hM/z84e+fYagMOMQDSQzfOIC/0H4tnVQk1kQa90pihvvo2A3y98V299kMqc68jw2xMfIIshXLsg/tqpeApSnIKcSrKX6TqHeXn9ZJe4uuzK4tYGhpYfx1ceIFWd25hIjiMrjkb5HjTQqvwrTqrc4gdJ/20J6sSn0p/aAI6BT+UqzRs2cdVMmEK6zTvHmdRnxAMkQ8NAo56UZej9YoGa7fKt5fJMVyll1muZjLp3rRDuZdBpGM4VixLw+OFou/HSdjfcVXQNTlLGIRD+WVyxX662BmvvWjctN5upNhZ3Ale9XrTmQhG2yClM/gQzKSfRi6aLi12N111vdj4Ug2iFxlg9v5KCsRSTQ416BGJFh8a1bAJYFbdd/8yCWvRt1QbdqXWKmpa5S2Ufuivhr7ajX6W+PbEG8XlnIhxAe3xTxsXuGwMhrHBzsBLXDkzZPjSIrMGznBt5+TDy2MCqqiqMepV4YHldyM3jLBPpyFxc5Ut7bT5bF/+01n894Rfi15txJnFV4YWsu2nwECnfLJtJ2iMPlaBwFqT5xyM95B9IuTanSG6UmY3hfcYwHGVdAS1GULnvdVSPFsdSCxR17pyslDARLu7uRNXe3l4z1mdmI5YX10AYphJY0lt5//EFzwNqpRtubYHwxpecaeQXlTHT1fYIz5gwnPny0pBKnqDqF4RZgl7PkSJci3PQS9R2QFNRX+3VzJ13AXE/DPzn7EcJKhajEgVAQN8vDooZ5xLjFPyqgo8hkFbDPF1554eoHm7XC+iw0SSDoLKMSsLPLGwu/jq9bBa5GTCTQ02gx1pVBKVpi/+PjXd+Vl3H7ElvCRNtUErBSNmzKSXFfCRmShZOHB2kJnyuX2IQ+6dEiOBAztx7mBFsmwbC0xvmnBwWx6nn6mbeY+3P82dLrkd8j+uH6bnuMz4rXLc1wonmLSxOQLArUVRDRls6Ng0nDw5VYgX08dMVlJ+NtBL4ra3gbM/CVIddIBRWbgPXttUZs277I2SaZ7KdCrO3pZo7WIApy9akeL2hOGR9kvLBn8uOw6mW77BjjAqH2rVTlfUbb1inAxyrUe6TGHF4uCTavE2Yge37CAFnUwChwN9M84oCfiq2XEM2+CARzhiByAvyFihLvZtrUaUq5le3g1ay67XbCYQ67l+Lrkm9Ktdt1nLEG2lnBuyFDSwnBIPH9KbWw5YGBMq28Gvadjo/3SmKsFaEuh43aiYbB3t9klBi8fpS1Blog0vtPlJC22sLu3u9OkRkeHXwxw5I4ta2E2ii0ZB8DlYmgrYJ2Hn3hwwPQMwdCXiGRBD70PJrDJV2hMitFP9QjW5Gwj5UGnjaPRK7M1x2nai16UAJ2yg7/s6lX9uldEC0JguvvcqRJ1ZlvT4IYRJSlafdb2YaLkEhitMsY3gSEgjkQ+d/qCCv68PdhO8orozBVRqXzAvGuzGAmuD3U54J6/ADZWikKH+5tqhb9DqaD2Q5SGgPkqai1rlkohkS/HBn7cKGKiHHDm1Szv+pUNX3sfFcwV+2H2nfBjZeySd60aU+DFnVGCv09WA4HP+gD/sC8CBuke9pTnGRkzYQICFDac+6eNGNqt16ELVBab6K+ahQNfE1Mpf+saYTpiMVXw/UM+qUvQi23FjMd3bXbNQoiu+KLt4EA2Hx5ZTp0htPrUnDQtcSsdcEbFK/oIDvzZMhSAaO9XA7AjoTqaEFoR/vVWdKaDjI4gVmdogf9b0BHPg/jGM1Pc9mM0RKh93xI4xZwT6PR73raRjRSIkle/uqSyI2Al/pWTXYioPFeUDhsfBmuRzvHXa8Flq+Cjz9XzPi2n3NK7BuM8+ZayNL5K5VtRrL8xPeWy2spIYJCxAqAP/ES5BZ6WmBKxZq2fKMh3Oigt9CStoChjTIZmx8Nn/QZ6QWfh3feQR4VN90LAEjpUn2dVM3R0I/r5gr9hzeh0Tgg4HePcO5U+zhTU4UcBbTVFooyCVxud71EBDs6BdaYzq8mk6ge/kEeyDkOv30dJXyI2039AmwTwvyMaFThUDdAkgfG8UwvYEzrvBfVFsFM9/8NP3w9RPMm4ebvbtgKTloEpIoWUViFT5YhH6bzFJvqJw2czk2EFyzHKfhijMO+6gJX1at21NolNeaFHPvSnD7Arbmv0p1gY60+aSUbx0Cp8DHw5mkRC1r/DC2dJJ1qCwU1Qghyz+/fmrZr0PspTxH8bxJFsVtJ/zdjqi1Ci8YFGOrD8OtIIYpCmQF8cGXx3lyrGKn65xXEegBwRbWh5lQ8WqvRaRWaW+lot0LtpK1vUYJUzPlZTliUYEoujOhTMCPg8LfeUJauvVULo2HT8GTEoWJ8LY+906g/bOqJfukTHHCmwGFaDEtceKyD8kGa2Q1ckHmdh/UnoX/AX0la9ICmCuEDXgbBAoKzMhLEiFpo98Q2XIMpxRRVcDUa6Ovu5gnYYT8xOeyHr2kgsQ2LRjL7fxDGAMMuBkO3szFn4H9f367F0Knbz2vcolt6AlVpfhcMrqPIc0HFVAgLtdxYGm49FWkDiGGGggfRd/pJLX5FD72C7scYTLFP0fxYN13D08U72FcOKcapLLMSETfKrh5u9yp3MNqDqiuhZ+tEnowVkM2ChdE5ce7DdHyS6Sth5MAcs2Z0Nfs2d8wMxQv15dOreLpXGkh3HbEcxZFIZNbpNiJEIp93EgQRJ2viCVJ4CpoMFFzNpARspASxAB/gBS3QsCaiAtv5sEOSSkkNA+P/b/z0iU5gGXyzbGVl2HqW51YxSYvT+gerHwLSLwZoJ/lGGEvI1LwZ9AbxKEIiMp9aSBFea9ZvgLITkZHNpO3QeWXJ5NqdADyRq0d5dSmEzRt8ACEVhCDNxSVrUwHYJokILjjHB0xx5FG2xsB9gaqhB0ZNlA==,iv:cE8zuRVAWVt7sLgnJsiTgwq2CpSsX4cQwIbYAeEv7iQ=,tag:j+VQnlNKapT3eTq4aPebQw==,type:str] + env: ENC[AES256_GCM,data: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,iv:JoleH7Auz4KF0I19yVxTWURUTCnJMIzg78/b+2LKnyc=,tag:nU3MB6s68DKJ3ko/PpoOGw==,type:str] sops: kms: [] gcp_kms: [] @@ -33,8 +33,8 @@ sops: ekFwNFp4dm9UeDU5WFU5SmJyY25lMEEKZquSaE2A4ZTSp8sNB5bjgUzdp8RtAHIH xmbtfiMcLUv7J3FdGNwmSn9P9lYgzCVEZBjI0BCj/9JEm0eGFL8Vbw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-01-05T10:45:11Z" - mac: ENC[AES256_GCM,data:iigwuhn4wm2NIRBymwslUKiljbrFzbEsz0UZ9K/YeEX4FU3oy3gY2j8qP+yd7qISdObxOHs6AtdMzx1KcTK4CHhoI3vJ+aYKBwmaNvM91Dgbz71f01IUql/+ZGG/UqqgkWpvac0bERDPW/ypXJM/g9YpzocqWb9bxyfUDRvxkyw=,iv:zI7CsVegQC5STNH3u0hIC/YWXTfNwRyU3JJ1hn5I3AU=,tag:h/+KCpAmnNXORHLcCyldoQ==,type:str] + lastmodified: "2025-01-08T22:14:31Z" + mac: ENC[AES256_GCM,data:6nQiAhON+eI1FznDb1HVMhyVQtbhuihXnRV1GesUbQFOPJkMXkRLrBpX+VZ5y6CUH5i0WchuIxsSpxsRBx9aO2Gp4ofD/hXXzzqDySHmYNUfJcWNXJgwVayJ4IMrpMID7Gx8k2EdMMPr3VfxeEBt1aQUBu5CNKgWyakO2FvdcFU=,iv:X+b4Z131hmQ/BByRQSQtrqKdtGAAUgFEzVgmmIzUQBU=,tag:C2YgMB2WSy+iXXQls8WN0g==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.9.2 diff --git a/secrets/services/garage.yaml b/secrets/services/garage.yaml new file mode 100644 index 0000000..d84d4af --- /dev/null +++ b/secrets/services/garage.yaml @@ -0,0 +1,31 @@ +garage: + env: ENC[AES256_GCM,data:miNp4SJ9xuMXSEIJYCZFWM96enAh8uwCxv0ySn2Jbp5V4Iso2uZ2R9dXqSS7y60pRq+bbXPYbBxBnmb+fhjvB7TdCLPom9CKSY8zMI7n/p1IE4qUFvzCG4ejV6BIsh/887BjzAx1UNcRG/9eUNcMfTu58wQwKmIzr1iu5pD+IlLHa+0/orpZKssQ2Ba1hMwLOAXp,iv:zgkGikunB4zQ4CfGgEd1DmLgYpEREJhoX4oT/zK3mI8=,tag:ohpZWF/lPHQc010mteJZDw==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1eg6sxflw6l44fp20sl068sampwd95fm0mnh4ssegrhtktgm50ptqcuspyn + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIemdMVVE4alZ2MElWeUpj + TjNhL2VYL2dwMmN0VzJxVGwzWHgvbm82QWtjCk1pem5SdzFpR0dRci80emo1VlVu + VWtWMVpoN2M4NUphcTgxeTB6aU83bjAKLS0tIGlJanA1TFBnaE9PTmRnQWVidE53 + elRZaFVaZ1VTRU1MbWlqSkJNZG1oRW8K8IupEpJzC0CJGpxSTssiFrQgdHAzCW4I + IlvYdZkUou/6km5OMnsFqhqEqIjAwVuJ08YiNzAv67ZzTG0ThD133A== + -----END AGE ENCRYPTED FILE----- + - recipient: age10h6pg5qdpc4t0rpmksfv788a57f04n83zgqaezkjjn65nkhv547s0vxfdn + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiemRZRmF1NWozM1RFS2Z2 + bld5V0lTS3V1OW1SU0VaR2IzZjJmbEtJVkhjCnBVKzFYUXYveGdkSTVmbzRldGRo + eVAxWXQ1TzczVjZiQ2NsUEk3YmhGNk0KLS0tIG04d0FDYXF1MU5ab3ZMTmpCUWNa + WTQ3dWs4enQrc2F3K3AvMUQvWEh6RDgKxJl3ftSpIrK+45LzjX9gIy41Lv+bcZsV + 7rriUhKAtaCXsQcO6Povif7zJyCROYhC0sgpRhmMKoN76TAH3zxvag== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-01-08T20:44:32Z" + mac: ENC[AES256_GCM,data:rVv9sNYb9Fttm5IjonAZBmcrCqC1cAp2sjMJDZ3JMt+YeyiCUI6jsXSGAc3pgP+7vvaTvDvdNwlAa5axxA72omE4eAK+9me0RLI75vA4UGrh3KiB4qrHK6H6qMUFg92uhKFo+uhtxERIV5/HSwbZPBT2R0pbSSQzTKk5U9UuJsY=,iv:CRSEqphlBsHwPvwXlTQui5U4fsXWgWnZ+8KYFAyVRlg=,tag:82mxRsp5uCo235jzJNK8LQ==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.9.2