diff --git a/modules/common/backup.nix b/modules/common/backup.nix index 8bc1bf6..9aaa3c5 100644 --- a/modules/common/backup.nix +++ b/modules/common/backup.nix @@ -52,6 +52,9 @@ in "backup/heptifili" = { inherit sopsFile; }; + "backup/hetzner-s3" = { + inherit sopsFile; + }; }; programs.ssh = { @@ -67,6 +70,7 @@ in services.restic.backups = { "${config.networking.hostName}-hetzner" = mkResticConfig { repository = "sftp://u371467-sub2@u371467.your-storagebox.de:22//backup"; inherit (cfg) paths exclude; }; "${config.networking.hostName}-wasabi" = mkResticConfig { repository = "s3:https://s3.eu-central-2.wasabisys.com/backup-xnee-net"; environmentFile = config.sops.secrets."backup/wasabi".path; inherit (cfg) paths exclude; }; + "${config.networking.hostName}-hetzner-s3" = mkResticConfig { repository = "s3:https://nbg1.your-objectstorage.com/backup-xnee-net"; environmentFile = config.sops.secrets."backup/hetzner-s3".path; inherit (cfg) paths exclude; }; } // lib.attrsets.optionalAttrs (config.networking.fqdn != "heptifili.xnee.net") { "${config.networking.hostName}-heptifili" = mkResticConfig { repository = "rest:https://restic.heptifili.xnee.net/nix-servers"; environmentFile = config.sops.secrets."backup/heptifili".path; inherit (cfg) paths exclude; }; diff --git a/secrets/common.yaml b/secrets/common.yaml index b583620..9dc3f12 100644 --- a/secrets/common.yaml +++ b/secrets/common.yaml @@ -3,6 +3,7 @@ backup: ssh-key: ENC[AES256_GCM,data:d51UjqprPMqtENQOMw3i8awE1T3/TJ1eig+xKD4TCUrsrGt6y1zIpef9i5gDHatQxqfum0KXsNtXeWDCqV4vC9HFs8Oj7XElN7l8HtDPxLckCJo6hjq7za8mlKVcFd3MJndeZ3JEdV9N5SrB27Sx3/LEcP23uxBjFpXAMPANQe+GI5bvhuPYHoD6mtCgBes5NBqWFKsnNtU6lYj8VWPGX4BlSH+FmqfKItXeDBxxhogQXq3yidNcZWPHOBkxARe4pEGg9vRk6DjE3pS25CZ60At+PPlhhF18lqMZvA/NyIoMTzsRNPHnKLXDsyVs6Du0FMyZJuGyECpzJhkUb1nA18QOZAO6S2lYjuysVx4akdGJQ4ENY79oiYbjYVYrUe8xUKMjYFvjgiWnP/dacdyIY9WlOmlrz5iDSYMlE5eCydel+rUAcRs//gUWEXpG/abZXPOxmGYzIx8t6Zo59yeKyVWqxrz880/YIuocuLaGewSS47dTfb0jOeBj2Ci1cQVruikjne1ppfxJUSJVsPiT,iv:BV983R2D+q62Qzzm6EUfCJkGZZHMMwnHYGmma3n/4Iw=,tag:/41tb1M2jveK5Onw8/ZNcg==,type:str] password: ENC[AES256_GCM,data:9Mj5szl84lCzMlCTwcXnciDJfGfxQkMo4kQ7K7js84cDyc49Yqrbug==,iv:0L4SpcRumX7EUDXm0T6kOXWSz0XA403TXu0sdTL11ws=,tag:+U0hxcPlVFPdRb2AVKcqnA==,type:str] wasabi: ENC[AES256_GCM,data:J1l40cGrZNJ2CXg3csQGyOBmnNCLTjQDf/sVECYx22dylQiohNQwFhQj8uq6fXyHY3OTOuW+62nJ4pa9Avq+/9Wcdk/8g0s+4uIiDjsAi0hrUEvEhi7dIE14SQVXTBO6/pidYw0=,iv:Z/9nqeiEVDguC845G3MQgVyeXpwHFiKrbEW73pQlSfs=,tag:iOVTjW4zFf5eAVFJ4JRE0w==,type:str] + hetzner-s3: ENC[AES256_GCM,data:ATrXrFnhuguwqkwf7rYh3QmVY5tWpz0imaLdVIYwROX6MunZsX5WhKOoWsH5aXnBaxOw4a0PQ2l6c8E67dXnF4i1qEMF0nXb+LX2jCH0ZWhDVLrjSXC5QL8kvDpVBxb1Cu990VdYgHYa,iv:oAVASEl9Cc/TTEH/ShaAeLcjwYKBOJjyJN8EsrrqGSg=,tag:inZoJR7Hbvz2ArjyBiOEag==,type:str] heptifili: ENC[AES256_GCM,data:8ZFwfxOPZfZTTZu4ZfQBMFLAj9tKSFSCOw/be7/EipboTJvEobCwVETvDQcDUnS76LVYEqRndY0lrYVR2d2+PvXaPWSMCEIePpH9XVX/EiqNsv8Ls8XKVQGkOSiOPLzb7ct2QmN5/3++hEpap6WT+AognGLcAsGaMEZijUZkxtLOXUZfbA02U1zS3FvQeasB350iL2zl9SknVQAmtD5hFwmDu+23scRCS5u0jOth/YMRyez1hRKoUXBl,iv:LZtBGbtH98wHBiQGWqjLY8n1f3dXW/4H05+ONIfATwA=,tag:k06uBxDFIKSTqyNYFrFHXQ==,type:str] acme: environment: ENC[AES256_GCM,data:i2hyFlAb1qANvqMyDsMZsGgJWbaYRkzPZqAGH6bfSJSKaf8oPVUe5zMSy+IiDI7idw==,iv:DmPZPemgw/e7hfCTRfQhWKoJJiJQcVMh+PVKcLu10Vw=,tag:6tg4cnZKBg2EasQ/Hekyfg==,type:str] @@ -52,8 +53,8 @@ sops: RFl1VjNjanBOcjYzRmVEaklYWGpLYUEKlQ84rv4qQWfFT7moZZNJIdo68CrIKmZ8 2kPwH+CyC15HjwT69ahz7jRfft4VdlqzgJx8v4XXMXrJ/F9sZmk/RA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-07-28T11:06:51Z" - mac: ENC[AES256_GCM,data:H0MaNgigrfuCHG2Cs6A4gf1HaiNGE0oyhfvp/TvjIkF2exgL28hBYewObvK3iI3rS0GMO6Bja2xmsaRkHGH05d4MQgqLKvj7TV9bgviB917CqndyKv900EHHS6FxBqXWgESChNjFd4tAaaKKTaDDy2IC0jJUiRrtuz6QO2ZaWlQ=,iv:LRSnX19spnxMnKo2CxcYhS4n8PNa6HA4/iEyXU1Ul/o=,tag:RtLX1SJ7Xk92uxU6F1AhGw==,type:str] + lastmodified: "2024-08-19T13:27:13Z" + mac: ENC[AES256_GCM,data:PFqAZtsPre9z878SJhNUBxKTFb+RrwaKOECIXpNImDHIGUnQBNhHjt4xqQlwpSKCBC1lqMFk6wxjeI5Pe/Xo5QLMy4b3j1uohUM0PUjr/04l6uv/pg8QBmj9MbGtK2a05ZteI+CirtXWd4J7eQOL7zPzm5mLfhFg7rxjWtKXxYg=,iv:DMcoARgBAiu3Zjojt042v/3+xJIfzzjIgUm9hZ42CNA=,tag:YNdYr4I6hHuhPHoOsu4hiA==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.9.0