Merge branch 'main' into services
This commit is contained in:
@@ -135,6 +135,8 @@ in
|
||||
];
|
||||
encryption_passcommand = ''cat ${config.sops.secrets."borgmatic_pass/local".path}'';
|
||||
|
||||
compression = "zstd";
|
||||
|
||||
keep_daily = 7;
|
||||
keep_weekly = 4;
|
||||
keep_monthly = 12;
|
||||
@@ -170,6 +172,8 @@ in
|
||||
|
||||
unknown_unencrypted_repo_access_is_ok = false;
|
||||
|
||||
compression = "zstd";
|
||||
|
||||
ssh_command = sshCommand;
|
||||
|
||||
mariadb_databases = cfg.mariadbDatabases;
|
||||
|
@@ -42,8 +42,8 @@
|
||||
};
|
||||
|
||||
fileSystems."/mnt/data" = {
|
||||
device = "/dev/disk/by-uuid/68de6372-0a77-498d-af90-28442b85872e";
|
||||
fsType = "btrfs";
|
||||
device = "/dev/disk/by-uuid/e8c98e59-0b3f-4b12-ad5c-91735fec0ac5";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
swapDevices = [
|
||||
|
@@ -19,26 +19,26 @@
|
||||
services.borgbackup.repos = {
|
||||
"appdata" = {
|
||||
authorizedKeys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAVFnxB+9zrj6Qwbh1DtOqBi6ZtxwSCh2u2OullT5DYX root@nixos"
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAVFnxB+9zrj6Qwbh1DtOqBi6ZtxwSCh2u2OullT5DYX borg@app-01"
|
||||
];
|
||||
path = "/mnt/data/backups/appdata";
|
||||
};
|
||||
|
||||
"db-mdb11" = {
|
||||
authorizedKeys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHhMXZ33s0TP6knwSt2U+bP7XknRPNJYYtfwFbpi0pdB root@nixos"
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHhMXZ33s0TP6knwSt2U+bP7XknRPNJYYtfwFbpi0pdB borg@db-mdb11"
|
||||
];
|
||||
path = "/mnt/data/backups/databases/db-mdb11";
|
||||
};
|
||||
"db-pg17" = {
|
||||
authorizedKeys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINxSft5QAqncZHW8PC1iWF+I0Jg0POlhWxvdEG8DnLfM root@db-pg17"
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINxSft5QAqncZHW8PC1iWF+I0Jg0POlhWxvdEG8DnLfM borg@db-pg17"
|
||||
];
|
||||
path = "/mnt/data/backups/databases/db-pg17";
|
||||
};
|
||||
"fs-01" = {
|
||||
authorizedKeys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFUk27CQfNy/qaXnUH1jkpy/X/m3sI2psqWstg6XstX5 root@fs-01"
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFUk27CQfNy/qaXnUH1jkpy/X/m3sI2psqWstg6XstX5 borg@fs-01"
|
||||
];
|
||||
path = "/mnt/data/backups/syncthing";
|
||||
};
|
||||
@@ -51,13 +51,13 @@
|
||||
};
|
||||
"minecraft" = {
|
||||
authorizedKeys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH382RP2C+0ak5HosVCAKyZsQy7TM17OruwDxPrgjQ4s root@nixos"
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH382RP2C+0ak5HosVCAKyZsQy7TM17OruwDxPrgjQ4s borg@gms-01"
|
||||
];
|
||||
path = "/mnt/data/backups/minecraft";
|
||||
};
|
||||
"radon" = {
|
||||
authorizedKeys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHa8Zl+D7p7/aby5o9JoADFX1JuOQfdbee4iQUxcOxLl root@radon"
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHa8Zl+D7p7/aby5o9JoADFX1JuOQfdbee4iQUxcOxLl borg@radon"
|
||||
];
|
||||
path = "/mnt/data/backups/hosts/radon";
|
||||
};
|
||||
|
@@ -12,9 +12,6 @@
|
||||
qemu.enable = true;
|
||||
spice.enable = true;
|
||||
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
boot.loader.efi.canTouchEfiVariables = true;
|
||||
|
||||
base.userSSHKeys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILiUy2yjIkdryH7pYMdkCNryy9gceqXJ7bhtMvvpPBIk etorres@xenon"
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILPByHF+TF/4rsMtZ+HxZfwmNi83sia5t+OHjn8X7BHn etorres@radon"
|
||||
|
Reference in New Issue
Block a user