Fachschaft/nixConfig
6
2
Fork 2
Code Issues 10 Pull requests 2 Projects Wiki Activity

Compare commits

base: Fachschaft:3a8fd7ee40c77ab390ddb16de3ae10deb2549f8f
Branches Tags
Fachschaft:main
..
compare: Fachschaft:690c56491d44fb57f759611657bd97978a75c103
Branches Tags
Fachschaft:main

1 commit
3a8fd7ee40 ... 690c56491d

Author SHA1 Message Date
Gonne
690c56491d Use sops for private key distribution 2024-03-21 18:56:08 +01:00
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
nixos/modules/borgbackup.nix
View file

@ -116,12 +116,12 @@ in {
jobs.fsaccount = { jobs.fsaccount = {
preHook = '' preHook = ''
mkdir -p /home/fsaccount/sicherung # Create if it does not exist mkdir -p /home/fsaccount/sicherung # Create if it does not exist
${pkgs.rsync}/bin/rsync -e 'ssh -i /run/secrets/backupKey' -r fachschaft@gw1.mathematik.tu-darmstadt.de:/home/fachschaft/* /home/fsaccount/sicherung ${pkgs.rsync}/bin/rsync -e 'ssh -i /home/fsaccount/.ssh/backupKey' -r fachschaft@gw1.mathematik.tu-darmstadt.de:/home/fachschaft/* /home/fsaccount/sicherung
''; '';
paths = "/home/fsaccount/sicherung"; paths = "/home/fsaccount/sicherung";
encryption.mode = "none"; encryption.mode = "none";
environment = { environment = {
BORG_RSH = "ssh -i /run/secrets/backupKey"; BORG_RSH = "ssh -i /home/fsaccount/.ssh/backupKey";
BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK = "yes"; BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK = "yes";
}; };
repo = "borg@localhost:fsaccount"; repo = "borg@localhost:fsaccount";
@ -141,6 +141,7 @@ in {
}; };
sops.secrets.backupKey = { sops.secrets.backupKey = {
sopsFile = ../machines/bragi/backupKey.yaml; sopsFile = ../machines/bragi/backupKey.yaml;
path = "/home/fsaccount/.ssh/backupKey";
owner = config.users.users.fsaccount.name; owner = config.users.users.fsaccount.name;
inherit (config.users.users.fsaccount) group; inherit (config.users.users.fsaccount) group;
mode = "0400"; mode = "0400";