diff --git a/borgbackup.nix b/borgbackup.nix new file mode 100644 index 0000000..fe906a9 --- /dev/null +++ b/borgbackup.nix @@ -0,0 +1,17 @@ +{ + sops.secrets."borg-private-key" = { + sopsFile = ./secrets/borgbackup.yaml; + mode = "0400"; + key = "private-key"; + owner = "root"; + group = "root"; + }; + + sops.secrets."borg-passphrase" = { + sopsFile = ./secrets/borgbackup.yaml; + mode = "0400"; + key = "passphrase"; + owner = "root"; + group = "root"; + }; +} diff --git a/configuration.nix b/configuration.nix index dd36bae..29870b7 100644 --- a/configuration.nix +++ b/configuration.nix @@ -9,6 +9,7 @@ imports = [ # Include the results of the hardware scan. ./hardware-configuration.nix + ./borgbackup.nix ./forgejo.nix ./boot.nix ]; diff --git a/forgejo.nix b/forgejo.nix index 272ff39..942bb83 100644 --- a/forgejo.nix +++ b/forgejo.nix @@ -104,18 +104,4 @@ sopsFile = ./secrets/forgejo.yaml; mode = "0400"; }; - sops.secrets."borg-private-key" = { - sopsFile = ./secrets/borgbackup.yaml; - mode = "0400"; - key = "private-key"; - owner = "root"; - group = "root"; - }; - sops.secrets."borg-passphrase" = { - sopsFile = ./secrets/borgbackup.yaml; - mode = "0400"; - key = "passphrase"; - owner = "root"; - group = "root"; - }; }