yisroelbaum/home-server-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

move borg secrets to its own file

Browse source
This commit is contained in:
Yisroel Baum 2026-06-12 11:20:15 +03:00
parent c590ff251a
commit 88f17bc21c
Signed by: yisroelbaum
GPG key ID: 0FA60884F75520A9
3 changed files with 18 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

17
borgbackup.nix Normal file
View file

@ -0,0 +1,17 @@
{
sops.secrets."borg-private-key" = {
sopsFile = ./secrets/borgbackup.yaml;
mode = "0400";
key = "private-key";
owner = "root";
group = "root";
};
sops.secrets."borg-passphrase" = {
sopsFile = ./secrets/borgbackup.yaml;
mode = "0400";
key = "passphrase";
owner = "root";
group = "root";
};
}

1
configuration.nix
View file

@ -9,6 +9,7 @@
imports =
[ # Include the results of the hardware scan.
./hardware-configuration.nix
./borgbackup.nix
./forgejo.nix
./boot.nix
];

14
forgejo.nix
View file

@ -104,18 +104,4 @@
sopsFile = ./secrets/forgejo.yaml;
mode = "0400";
};
sops.secrets."borg-private-key" = {
sopsFile = ./secrets/borgbackup.yaml;
mode = "0400";
key = "private-key";
owner = "root";
group = "root";
};
sops.secrets."borg-passphrase" = {
sopsFile = ./secrets/borgbackup.yaml;
mode = "0400";
key = "passphrase";
owner = "root";
group = "root";
};
}