hosts/fs-01: make use of credential file for ping url and repo path

hosts/fs-01/default.nix

@@ -22,6 +22,8 @@ in
 
   syncthingserver.enable = true;
 
+  sops.secrets."borgmatic_repo_urls/local" = { };
+  sops.secrets."borgmatic_repo_urls/remote" = { };
   sops.secrets."borgmatic_ping_urls/local" = { };
   sops.secrets."borgmatic_ping_urls/remote" = { };
   sops.secrets."borgmatic_pass/local" = { };
@@ -37,7 +39,7 @@ in
         repositories = [
           {
             label = backupLabel;
-            path = "ssh://borg@borg-01.tail755c5.ts.net/./";
+            path = ''{credential file ${config.sops.secrets."borgmatic_repo_urls/local".path}}'';
           }
         ];
         encryption_passcommand = ''cat ${config.sops.secrets."borgmatic_pass/local".path}'';
@@ -52,7 +54,7 @@ in
         ssh_command = "ssh -i /etc/ssh/ssh_host_ed25519_key";
 
         healthchecks = {
-          ping_url = "https://hc.its-et.me/ping/PlGPBqq-0rLI4N4ya3jYmg/backup-syncthing";
+          ping_url = ''{credential file ${config.sops.secrets."borgmatic_ping_urls/local".path}}'';
         };
       };
 

secrets/fs-01.yml

@@ -1,3 +1,6 @@
+borgmatic_repo_urls:
+    local: ENC[AES256_GCM,data:0L9hwomjcdadDoN7Lve6KOrBhpO7LT5igtk+fOzxKTfNOVMpnQk=,iv:5YTFpdVpLS4s29rW2jIzoI7KVf0X9qNKtxEOdkA4QtQ=,tag:1jbXEoJ/ZTUjvq9mEzVUog==,type:str]
+    remote: ENC[AES256_GCM,data:yuaqdLbQ48xWbgpIA0X4exLj4i+JrdiIyTWoeUVub1Gb/P0mhqA6rhg=,iv:2P09wTYYJJWQY08SRWS4FV2P+a80unjDnHP174YFwMg=,tag:u+90WK/jTRFEPyBqWIzV3A==,type:str]
 borgmatic_ping_urls:
     local: ENC[AES256_GCM,data:7qFq0nrqqrH556Ttf3KeRpDl2UicOBeWD8VBVSiN+TbVDVeIs/AXMKY2+IJMU2i15htL05hk2Y59bqSKr5fM3Ag=,iv:lII62b/Mw8dTgnHiBU3aM1s2bNGK1olk9Ef9squ8qME=,tag:fBlO16/h01QEfJnRwfLnxg==,type:str]
     remote: ENC[AES256_GCM,data:3/4av4qjlC55VzjG1nB849mhN+FIn1S4Z20s2i/MKjQQAk+WsPLoTzCgiYY8M7MJxnB+xQusSmbPY+nlNbAW3SnbpOnQilr/,iv:yladJ+d5wncv9CDvF3GbNgPdYKIh6OdeAo9qLsKQy/4=,tag:TO1Tc/dyxF0N4YHXd7YzSg==,type:str]
@@ -33,7 +36,7 @@ sops:
             TVZ0TDRSUG55aThrWEtFaEk1V3ZzR0kK2aj5mVpDPXUHQkaJ5MVqH279iJZZON4H
             sFzaiRqnknP7vujJlxeKSEQilVB2wsslMVMCUcH+bd7FdBimQcAi8Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-08-23T13:35:09Z"
-    mac: ENC[AES256_GCM,data:viebtr11luCNL2VWA0I8i8QZhXZcevSomGWgF0giPxAwGN5E0gQsLD74xoqLeXHY5Z07aGoVt69V1uDJaNzwIJFHeDEgt+EgF357w9SV9psib9z18s+p2xt23ZFnEFE/jJIlrSRNINoP2UJ/rshF6nzDLUI76dA3lf7MnwAi2+o=,iv:9uJWjf/nFy+Qwv3KUKnMBVXLNqzHaEOIOLuNHRTzNY0=,tag:cfWIbcqog08xId+kcTM7BA==,type:str]
+    lastmodified: "2025-08-25T00:06:58Z"
+    mac: ENC[AES256_GCM,data:I0qTwKP44TqxtUcI57AGch3Ajuw/Jqkv5bCXfzDUJuoTvsyKiTkD2LyaIcZe20cbtNCshsCkOQ6S2/LGTdq/SpCa2xGmMTB83E02S1BlkK/jRwNRTp6InQczYY+fmE9SURlMwPJYYXnnDb/9qqFNCRFDBNCuf3l2G96D8gw93R4=,iv:dhUWZYpLMSUi+nSt0vjVbPZZlq4lcQDG4pzXy9XQxSE=,tag:cdb7pVVwK/hnyWQxpctyfw==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2