Add additional Backup target

peterablehmann · Aug 19, 2024 · 4312d20 · 4312d20
1 parent 4180b62
commit 4312d20
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/modules/common/backup.nix b/modules/common/backup.nix
@@ -52,6 +52,9 @@ in
           "backup/heptifili" = {
             inherit sopsFile;
           };
+          "backup/hetzner-s3" = {
+            inherit sopsFile;
+          };
         };
 
       programs.ssh = {
@@ -67,6 +70,7 @@ in
       services.restic.backups = {
         "${config.networking.hostName}-hetzner" = mkResticConfig { repository = "sftp://[email protected]:22//backup"; inherit (cfg) paths exclude; };
         "${config.networking.hostName}-wasabi" = mkResticConfig { repository = "s3:https://s3.eu-central-2.wasabisys.com/backup-xnee-net"; environmentFile = config.sops.secrets."backup/wasabi".path; inherit (cfg) paths exclude; };
+        "${config.networking.hostName}-hetzner-s3" = mkResticConfig { repository = "s3:https://nbg1.your-objectstorage.com/backup-xnee-net"; environmentFile = config.sops.secrets."backup/hetzner-s3".path; inherit (cfg) paths exclude; };
       }
       // lib.attrsets.optionalAttrs (config.networking.fqdn != "heptifili.xnee.net") {
         "${config.networking.hostName}-heptifili" = mkResticConfig { repository = "rest:https://restic.heptifili.xnee.net/nix-servers"; environmentFile = config.sops.secrets."backup/heptifili".path; inherit (cfg) paths exclude; };

diff --git a/secrets/common.yaml b/secrets/common.yaml
@@ -3,6 +3,7 @@ backup:
     ssh-key: ENC[AES256_GCM,data:d51UjqprPMqtENQOMw3i8awE1T3/TJ1eig+xKD4TCUrsrGt6y1zIpef9i5gDHatQxqfum0KXsNtXeWDCqV4vC9HFs8Oj7XElN7l8HtDPxLckCJo6hjq7za8mlKVcFd3MJndeZ3JEdV9N5SrB27Sx3/LEcP23uxBjFpXAMPANQe+GI5bvhuPYHoD6mtCgBes5NBqWFKsnNtU6lYj8VWPGX4BlSH+FmqfKItXeDBxxhogQXq3yidNcZWPHOBkxARe4pEGg9vRk6DjE3pS25CZ60At+PPlhhF18lqMZvA/NyIoMTzsRNPHnKLXDsyVs6Du0FMyZJuGyECpzJhkUb1nA18QOZAO6S2lYjuysVx4akdGJQ4ENY79oiYbjYVYrUe8xUKMjYFvjgiWnP/dacdyIY9WlOmlrz5iDSYMlE5eCydel+rUAcRs//gUWEXpG/abZXPOxmGYzIx8t6Zo59yeKyVWqxrz880/YIuocuLaGewSS47dTfb0jOeBj2Ci1cQVruikjne1ppfxJUSJVsPiT,iv:BV983R2D+q62Qzzm6EUfCJkGZZHMMwnHYGmma3n/4Iw=,tag:/41tb1M2jveK5Onw8/ZNcg==,type:str]
     password: ENC[AES256_GCM,data:9Mj5szl84lCzMlCTwcXnciDJfGfxQkMo4kQ7K7js84cDyc49Yqrbug==,iv:0L4SpcRumX7EUDXm0T6kOXWSz0XA403TXu0sdTL11ws=,tag:+U0hxcPlVFPdRb2AVKcqnA==,type:str]
     wasabi: ENC[AES256_GCM,data:J1l40cGrZNJ2CXg3csQGyOBmnNCLTjQDf/sVECYx22dylQiohNQwFhQj8uq6fXyHY3OTOuW+62nJ4pa9Avq+/9Wcdk/8g0s+4uIiDjsAi0hrUEvEhi7dIE14SQVXTBO6/pidYw0=,iv:Z/9nqeiEVDguC845G3MQgVyeXpwHFiKrbEW73pQlSfs=,tag:iOVTjW4zFf5eAVFJ4JRE0w==,type:str]
+    hetzner-s3: ENC[AES256_GCM,data:ATrXrFnhuguwqkwf7rYh3QmVY5tWpz0imaLdVIYwROX6MunZsX5WhKOoWsH5aXnBaxOw4a0PQ2l6c8E67dXnF4i1qEMF0nXb+LX2jCH0ZWhDVLrjSXC5QL8kvDpVBxb1Cu990VdYgHYa,iv:oAVASEl9Cc/TTEH/ShaAeLcjwYKBOJjyJN8EsrrqGSg=,tag:inZoJR7Hbvz2ArjyBiOEag==,type:str]
     heptifili: ENC[AES256_GCM,data:8ZFwfxOPZfZTTZu4ZfQBMFLAj9tKSFSCOw/be7/EipboTJvEobCwVETvDQcDUnS76LVYEqRndY0lrYVR2d2+PvXaPWSMCEIePpH9XVX/EiqNsv8Ls8XKVQGkOSiOPLzb7ct2QmN5/3++hEpap6WT+AognGLcAsGaMEZijUZkxtLOXUZfbA02U1zS3FvQeasB350iL2zl9SknVQAmtD5hFwmDu+23scRCS5u0jOth/YMRyez1hRKoUXBl,iv:LZtBGbtH98wHBiQGWqjLY8n1f3dXW/4H05+ONIfATwA=,tag:k06uBxDFIKSTqyNYFrFHXQ==,type:str]
 acme:
     environment: ENC[AES256_GCM,data:i2hyFlAb1qANvqMyDsMZsGgJWbaYRkzPZqAGH6bfSJSKaf8oPVUe5zMSy+IiDI7idw==,iv:DmPZPemgw/e7hfCTRfQhWKoJJiJQcVMh+PVKcLu10Vw=,tag:6tg4cnZKBg2EasQ/Hekyfg==,type:str]
@@ -52,8 +53,8 @@ sops:
             RFl1VjNjanBOcjYzRmVEaklYWGpLYUEKlQ84rv4qQWfFT7moZZNJIdo68CrIKmZ8
             2kPwH+CyC15HjwT69ahz7jRfft4VdlqzgJx8v4XXMXrJ/F9sZmk/RA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-07-28T11:06:51Z"
-    mac: ENC[AES256_GCM,data:H0MaNgigrfuCHG2Cs6A4gf1HaiNGE0oyhfvp/TvjIkF2exgL28hBYewObvK3iI3rS0GMO6Bja2xmsaRkHGH05d4MQgqLKvj7TV9bgviB917CqndyKv900EHHS6FxBqXWgESChNjFd4tAaaKKTaDDy2IC0jJUiRrtuz6QO2ZaWlQ=,iv:LRSnX19spnxMnKo2CxcYhS4n8PNa6HA4/iEyXU1Ul/o=,tag:RtLX1SJ7Xk92uxU6F1AhGw==,type:str]
+    lastmodified: "2024-08-19T13:27:13Z"
+    mac: ENC[AES256_GCM,data:PFqAZtsPre9z878SJhNUBxKTFb+RrwaKOECIXpNImDHIGUnQBNhHjt4xqQlwpSKCBC1lqMFk6wxjeI5Pe/Xo5QLMy4b3j1uohUM0PUjr/04l6uv/pg8QBmj9MbGtK2a05ZteI+CirtXWd4J7eQOL7zPzm5mLfhFg7rxjWtKXxYg=,iv:DMcoARgBAiu3Zjojt042v/3+xJIfzzjIgUm9hZ42CNA=,tag:YNdYr4I6hHuhPHoOsu4hiA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.0