daylin/oizys
1
0
Fork 0
mirror of https://github.com/daylinmorgan/oizys.git synced 2025-02-22 15:15:50 -06:00
Code Issues Projects Releases Packages Wiki Activity

reorg

Browse source
This commit is contained in:
Daylin Morgan 2025-02-07 09:58:06 -06:00
parent e17cc880ca
commit 10280b0495
Signed by: daylin
GPG key ID: 950D13E9719334AD
2 changed files with 22 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
hosts/algiz/default.nix
View file

@ -1,5 +1,4 @@
{
config,
enabled,
pkgs,
...
@ -16,24 +15,6 @@
'')
];
# maybe I don't need to use root and can use this strategy?
# https://wiki.nixos.org/wiki/Restic#Security_Wrapper
# would this make it possible for me to run the binary as my 'normal user'?
services.restic.backups.gdrive = {
# directories created by gitea and soft-serve aren't world readable
user = "root";
rcloneConfigFile = "/home/daylin/.config/rclone/rclone.conf";
repository = "rclone:g:archives/algiz";
passwordFile = config.sops.secrets.restic-algiz.path;
paths = [
"/home/daylin/services/git/"
"/home/daylin/services/gotosocial/"
"/home/daylin/services/caddy/"
"/home/daylin/services/wedding-website/"
"/home/daylin/services/bsky-pds/"
];
};
# git user handles the forgjo ssh authentication
users.users.git.isNormalUser = true;
}

22
hosts/algiz/restic.nix Normal file
View file

@ -0,0 +1,22 @@
{
config,
...
}:
{
services.restic.backups.gdrive = {
# directories created by gitea and soft-serve aren't world readable
user = "root";
rcloneConfigFile = "/home/daylin/.config/rclone/rclone.conf";
repository = "rclone:g:archives/algiz";
passwordFile = config.sops.secrets.restic-algiz.path;
paths = [
"/home/daylin/services/git/"
"/home/daylin/services/gotosocial/"
"/home/daylin/services/caddy/"
"/home/daylin/services/wedding-website/"
"/home/daylin/services/bsky-pds/"
];
};
}