summaryrefslogtreecommitdiff
path: root/modules/backup-server.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/backup-server.nix')
-rw-r--r--modules/backup-server.nix26
1 files changed, 2 insertions, 24 deletions
diff --git a/modules/backup-server.nix b/modules/backup-server.nix
index de0f772..7176fa4 100644
--- a/modules/backup-server.nix
+++ b/modules/backup-server.nix
@@ -3,21 +3,6 @@
let
cfg = config.orbekk.backups;
- backups.pincer = {
- paths = [ "/etc/nixos" ];
- doInit = true;
- repo = cfg.serverLocation;
- encryption = {
- mode = "repokey-blake2";
- passCommand = "cat ${config.age.secrets.pincer-borg-repo-key.path}";
- };
- environment = {
- BORG_RSH = "ssh -i ${config.age.secrets.pincer-borg-ssh-key.path}";
- };
- compression = "auto,lzma";
- startAt = "daily";
- };
-
dragon-tmpl = repo: {
inherit repo;
paths = [ "/home" "/opt" "/var" "/storage" ];
@@ -25,10 +10,10 @@ let
doInit = true;
encryption = {
mode = "repokey-blake2";
- passCommand = "cat ${config.age.secrets.dragon-borg-repo-key.path}";
+ passCommand = "cat /opt/secret/borg-backup-keys/dragon_backup";
};
environment = {
- BORG_RSH = "ssh -i ${config.age.secrets.dragon-borg-ssh-key.path}";
+ BORG_RSH = "ssh -i /opt/secret/borg-backup-keys/ssh_key";
};
compression = "auto,lzma";
startAt = "daily";
@@ -61,13 +46,6 @@ in {
};
config = {
- age.secrets = lib.mkIf cfg.enableClient {
- "${config.networking.hostName}-borg-repo-key".file = ./.
- + "/../secrets/${config.networking.hostName}-borg-repo-key.age";
- "${config.networking.hostName}-borg-ssh-key".file = ./.
- + "/../secrets/${config.networking.hostName}-borg-ssh-key.age";
- };
-
services.borgbackup.repos = lib.mkIf cfg.enableServer {
# dragon = {
# authorizedKeys =