Gonne/nixConfig
1
0
Fork 0
forked from Fachschaft/nixConfig
Code Pull requests Activity

Compare commits

base: Gonne:45a20b7f52ee00ded6f21c895715cc9670c4ccfc
Branches Tags
Gonne:main
Gonne:kaalut
Gonne:lobon
Gonne:update
Fachschaft:main
Fachschaft:nyarlathtop
..
compare: Gonne:354488c38d014d8800184fbe336a29cda63a1ae7
Branches Tags
Gonne:kaalut
Gonne:main
Gonne:lobon
Gonne:update
Fachschaft:main
Fachschaft:nyarlathtop

3 commits
45a20b7f52 ... 354488c38d

Author SHA1 Message Date
Gonne
354488c38d Mailman backups 2024-04-03 15:45:08 +02:00
Gonne
6e513aaf43 Add pushing to hrz allowlist 2024-04-03 15:45:08 +02:00
Gonne
faf160311f Setze Mailman-Maschine auf 2024-04-03 15:45:04 +02:00
3 changed files with 9 additions and 11 deletions
Show stats Expand all files Collapse all files

9
nixos/machines/bragi/configuration.nix
View file

@ -1,4 +1,4 @@
{config, ...}: { {
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
../../roles ../../roles
@ -12,11 +12,4 @@
# System configuration here # System configuration here
networking.hostName = "bragi"; networking.hostName = "bragi";
system.stateVersion = "23.11"; system.stateVersion = "23.11";
sops.secrets.backupKey = {
sopsFile = ./backupKey.yaml;
owner = config.users.users.fsaccount.name;
inherit (config.users.users.fsaccount) group;
mode = "0400";
};
} }

3
nixos/machines/bragi/network.nix
View file

@ -10,7 +10,6 @@
} }
]; ];
defaultGateway = "192.168.1.137"; defaultGateway = "192.168.1.137";
# https://www.hrz.tu-darmstadt.de/services/it_services/nameserver_dns/index.de.jsp nameservers = ["130.83.2.22" "130.83.56.60" "130.83.22.60" "130.82.22.63"];
nameservers = ["130.83.22.63" "130.83.22.60" "130.83.56.60"];
}; };
} }

8
nixos/modules/borgbackup.nix
View file

@ -128,7 +128,7 @@ in {
jobs.fsaccount = { jobs.fsaccount = {
preHook = '' preHook = ''
mkdir -p /home/fsaccount/sicherung # Create if it does not exist mkdir -p /home/fsaccount/sicherung # Create if it does not exist
${pkgs.rsync}/bin/rsync --rsh='ssh -i /run/secrets/backupKey' --recursive --delete fachschaft@gw1.mathematik.tu-darmstadt.de:/home/fachschaft/* /home/fsaccount/sicherung ${pkgs.rsync}/bin/rsync -e 'ssh -i /run/secrets/backupKey' -r fachschaft@gw1.mathematik.tu-darmstadt.de:/home/fachschaft/* /home/fsaccount/sicherung
''; '';
paths = "/home/fsaccount/sicherung"; paths = "/home/fsaccount/sicherung";
encryption.mode = "none"; # Otherwise the key is next to the backup or we have human interaction. encryption.mode = "none"; # Otherwise the key is next to the backup or we have human interaction.
@ -168,5 +168,11 @@ in {
} }
]; ];
}; };
sops.secrets.backupKey = {
sopsFile = ../machines/bragi/backupKey.yaml;
owner = config.users.users.fsaccount.name;
inherit (config.users.users.fsaccount) group;
mode = "0400";
};
}; };
} }