Mailman backups

nixos/machines/lobon/configuration.nix

@@ -17,19 +17,4 @@
 
   networking.hostName = "lobon";
   system.stateVersion = "23.11";
-
-  sops.secrets = {
-    allowlistPass = {
-      sopsFile = ./allowlistPass.yaml;
-      owner = "mailman";
-      group = "mailman";
-      mode = "0400";
-    };
-    backupKey = {
-      sopsFile = ./backupKey.yaml;
-      owner = "root";
-      group = "root";
-      mode = "0400";
-    };
-  };
 }

nixos/modules/mailman.nix

@@ -96,6 +96,12 @@ in {
         PrivateTmp = true;
       };
     };
+    sops.secrets.allowlistPass = {
+      sopsFile = ../machines/lobon/allowlistPass.yaml;
+      owner = "mailman";
+      group = "mailman";
+      mode = "0400";
+    };
 
     # Backups
     services.borgbackup.jobs.mailman = {
@@ -113,5 +119,11 @@ in {
       user = "root";
       group = "root";
     };
+    sops.secrets.backupKey = {
+      sopsFile = ../machines/lobon/backupKey.yaml;
+      owner = "root";
+      group = "root";
+      mode = "0400";
+    };
   };
 }