hosts/nbg-01: add borgmatic config

hosts/nbg-01/default.nix

@@ -34,6 +34,8 @@
       owner = "traefik";
       mode = "0400";
     };
+    "borgmatic_pass/local" = { };
+    "borgmatic_pass/remote" = { };
   };
 
   crowdsec-firewall-bouncer = {
@@ -77,6 +79,19 @@
     };
   };
 
+  borg-config = {
+    enable = true;
+
+    backupLabel = "nbg-01";
+    localRepoPath = "ssh://borg@borg-01.tail755c5.ts.net/./";
+    remoteRepoPath = "ssh://fm1833@fm1833.rsync.net/./hosts/lax-01";
+    sourceDirectories = [
+      "/var/lib/uptime-kuma"
+    ];
+    hcPingUrlLocal = "https://hc.its-et.me/ping/PlGPBqq-0rLI4N4ya3jYmg/backup-nbg-01";
+    hcPingUrlRemote = "https://hc.its-et.me/ping/PlGPBqq-0rLI4N4ya3jYmg/backup-nbg-01-remote";
+  };
+
   base.userSSHKeys = [
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDt43wa3heh97BfsDk+3RMteIltWOHcEKJdohasSjRif etorres@xenon"
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICEAPw4dzYQD0oMZnSBFmFlHvKvUadO705OwQKtrnQ46 etorres@radon"

secrets/nbg-01.yml

@@ -1,3 +1,6 @@
+borgmatic_pass:
+    local: ENC[AES256_GCM,data:le4xxqwqGtG6v+5oGSYIwlLtKPs=,iv:WnZJFYsrEDKlidBu0BQJEL7B0zANbViANQFFZVsiugE=,tag:LQzVP3nf3voOl4uNCFEN7g==,type:str]
+    remote: ENC[AES256_GCM,data:q1bIUbGanlWOCE/eKwfEMe1Erfo=,iv:DkHhHVA+C/0SgslkVJ55UMUyZGp5XK7B0FuYb0/nPYY=,tag:ffF2IkELD7hE6OklvBCZDQ==,type:str]
 crowdsec:
     lapiKey: ENC[AES256_GCM,data:QqlZoBCZV8XxboAotAox0pPcmEOe5/XqvhlrWpjxOUXm+VK2Zc6hciYgPQ==,iv:bZHqQ1carLwbB0hddXKIFpV83aUeRtXFm9uzIHLAuO0=,tag:ZSraTdCVxGfY81OmCp9s6A==,type:str]
 sops:
@@ -29,7 +32,7 @@ sops:
             S2tncC9CWThabmRNeWRJMEh4WnFLUzgKS98avLf0Pc35T65HblffVIkByMq+VpCm
             usWHmflXCahRZWeZQMPmiiHlVruDYQcOdXrl79RQeLqpaPX32wdtjQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-19T05:56:05Z"
-    mac: ENC[AES256_GCM,data:JqoHsMXO0LVE+9Uo0GBlDWxLyyCj9d8NpBcE+ZQsMrbUva9035V7N/ggwmmFIDdghUN5Njh8mWKGAnLV00Khf1gzXRfytROR9v1XbRFSsNK+jpRDKW9XoQShK6D9N/l2Fx4vhdXltgSr/jh4/zO/9iFTNabQZnBFMAjj7y8UGbM=,iv:F9LEqbaXAExru5Ez8Yr4DVJE++ISW1mM2iH294PpNNo=,tag:gQ5++jQQ3nEx1SOw2pox+A==,type:str]
+    lastmodified: "2025-10-19T18:25:00Z"
+    mac: ENC[AES256_GCM,data:rUWT8o/p5FBxFAcoHKvOnUfQMeFxSHUuaqneobl7vPezGzqJgASqYuPzivqGOJftJXva9kKMg2YbD7ehbFvPD/VLegN87U1+yiB1I68mpJ3XL7SIMh2BpHhqKR1BhxaEP/wo+6lT9+fB3or8c6ka3gr7yfxpf9o28VMRX3YJDD4=,iv:Po+nB4bndRbHv/nHbjU9z/cA8nW8o1kyVXwyABdVjJU=,tag:4CiqD4BeFHj0WtwToA+1vA==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0