etorres/nixos
0
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'borgbackup'

Browse Source
This commit is contained in:
Eric Torres
2025-08-23 17:19:47 -07:00
parent 91ab7c4dd3 1f356b535c
commit 250dbc38b5
2 changed files with 53 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

48
hosts/db-mdb11/default.nix
View File

@@ -20,6 +20,54 @@
enable = true; enable = true;
}; };
sops.secrets."borgmatic_pass/local" = { };
sops.secrets."borgmatic_pass/remote" = { };
sops.secrets."mariadb_databases/bookstack" = { };
sops.secrets."mariadb_databases/hortusfox" = { };
services.borgmatic = {
enable = true;
enableConfigCheck = true;
configurations = {
local = {
repositories = [
{
label = "local";
path = "ssh://borg@borg-01.tail755c5.ts.net/./";
}
];
encryption_passcommand = ''cat ${config.sops.secrets."borgmatic_pass/local".path}'';
mariadb_databases = [
{
name = "bookstackapp";
username = "bookstack";
password = ''{credential file ${config.sops.secrets."mariadb_databases/bookstack".path}}'';
}
{
name = "hortusfox";
username = "hortusfox";
password = ''{credential file ${config.sops.secrets."mariadb_databases/hortusfox".path}}'';
}
];
keep_daily = 7;
keep_weekly = 4;
keep_monthly = 12;
keep_yearly = 3;
unknown_unencrypted_repo_access_is_ok = false;
ssh_command = "ssh -i /etc/ssh/ssh_host_ed25519_key";
healthchecks = {
ping_url = "https://hc.its-et.me/ping/PlGPBqq-0rLI4N4ya3jYmg/backup-databases-db-mdb11";
};
};
};
};
base.userSSHKeys = [ base.userSSHKeys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDyi9TFKaEVrO4Gl7/t47PERjOiN3WHMD29UgZV5gm4G etorres@xenon" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDyi9TFKaEVrO4Gl7/t47PERjOiN3WHMD29UgZV5gm4G etorres@xenon"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPWS4JI7h2B89m8bFT4CUzNmWViVy74CLDQXdhgxVnBk etorres@radon" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPWS4JI7h2B89m8bFT4CUzNmWViVy74CLDQXdhgxVnBk etorres@radon"

10
secrets/db-mdb11.yml
View File

@@ -1,9 +1,9 @@
borgmatic_pass: borgmatic_pass:
local: ENC[AES256_GCM,data:EldjySkh6JU5rekUBZx61gQs9rU=,iv:uRfm1naqhDLBWyAuBOhyAzwHtuPmMLa15gGD00HpkkU=,tag:BD1VDDcWYaKUHrcNKLNBNw==,type:str] local: ENC[AES256_GCM,data:EldjySkh6JU5rekUBZx61gQs9rU=,iv:uRfm1naqhDLBWyAuBOhyAzwHtuPmMLa15gGD00HpkkU=,tag:BD1VDDcWYaKUHrcNKLNBNw==,type:str]
remote: ENC[AES256_GCM,data:Gn7doGhY1UBxVD2r0BsngKo2vuU=,iv:qWIda8cFLoqLnIrToKh1wG0sYTeFDCSlWuNWBUfu74U=,tag:ma4sNmwZi/cn3RUAgPajhQ==,type:str] remote: ENC[AES256_GCM,data:Gn7doGhY1UBxVD2r0BsngKo2vuU=,iv:qWIda8cFLoqLnIrToKh1wG0sYTeFDCSlWuNWBUfu74U=,tag:ma4sNmwZi/cn3RUAgPajhQ==,type:str]
mariadb_dabases: mariadb_databases:
bookstack: ENC[AES256_GCM,data:1JOePVupIPKESwXfR3cH2OyhACM=,iv:hVo6HCP3j9A/t9OgarfdyfL2iKDfOUCB2mCp1KsjD/g=,tag:j0JaTujE/4uudNKaMSobDg==,type:str] bookstack: ENC[AES256_GCM,data:iQjasOHhOEGl/Ie2FowHXBKn3t0=,iv:W4uncgHnVdZpUvPh6PnvMmRMJXf4tOt/dwqibR0LwYk=,tag:Bk+0pRop1wotkgD61Uh5iQ==,type:str]
hortusfox: ENC[AES256_GCM,data:zqCleMgssgYs7g9ZBr9TLz4Pddk=,iv:uPdjgsbYirZZaDV/BP5QkoVQT+EWLdwjlfOjrFK9tnI=,tag:JJFLtwndB+JrhO782WTHIA==,type:str] hortusfox: ENC[AES256_GCM,data:a1WOvjQ+Tzf/DHfRGUOkaf/2RNM=,iv:KWZcLbDXFGvJzoZIwzfNGqQI4JvFuXjoCyejUXBKcVc=,tag:bxdKvHdg9XH5Uz364uqUBg==,type:str]
sops: sops:
age: age:
- recipient: age1jmsrfddctahhznfv7jv77tgw5crmhjhe0e0kzc967hvax4sulv3s6hp2su - recipient: age1jmsrfddctahhznfv7jv77tgw5crmhjhe0e0kzc967hvax4sulv3s6hp2su
@@ -33,7 +33,7 @@ sops:
NkVoaEtBMHdGbDlKV2ZZeDV0ZmFURmcKCBAciuWWm/0/aOmDvd36wpxeHvKMP5Cq NkVoaEtBMHdGbDlKV2ZZeDV0ZmFURmcKCBAciuWWm/0/aOmDvd36wpxeHvKMP5Cq
Sh2sIswKFQVKcwc5cK1/h4hCkMAAFlcVELO+S9vmPFDKByzwkITUsw== Sh2sIswKFQVKcwc5cK1/h4hCkMAAFlcVELO+S9vmPFDKByzwkITUsw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-08-23T21:27:51Z" lastmodified: "2025-08-24T00:18:19Z"
mac: ENC[AES256_GCM,data:62j2QM9NQsk8BzQfK8ddVurGJvyUIFK4mVAvY6PzxMgiVoi9QWe7Zpcu705svI5Kk9IeWnESCW/FbDjrLBdGwe9BUjjsRKEd+IJpQDZ4jemkoQdtlwLg23vcelwYFgQ/b6YLrT6F4PHP45qjSzGLFnYgep7f04hjlCWaDbebS1I=,iv:rfJ1z8O6N3rdvHDLqC8c6bNhjM9ZPfEsXxhIslZNut8=,tag:sJtSU3o2LW80PUu0roK5wQ==,type:str] mac: ENC[AES256_GCM,data:7y9nkWfnzB3MaytEJ32C3UpLdXLhUB69CqB3CrTDObeCp7vMtK1pUOjMufZYKe+YslNi1mFVu19jhnKwAzLtc8zkmDn5svBWX+iPcNq8rl3ZEuqL/fbJwglVHAOe5pAIdxVAocLdt4+LuaUjgC/Gmo66mzg0qDjKfloZ3C7H2Zw=,iv:hQgQ3NJrxkIgYc2Wdw/r7+fkkhqZiRUHcumkJJkEEFI=,tag:mGS/QD2+36uobPPzgDmqvw==,type:str]
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.10.2 version: 3.10.2