diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-17 17:25:47 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-17 17:25:47 +0100 |
| commit | 1b9e49bbe7bfa89cdf44506304be38a91b4fa5a1 (patch) | |
| tree | f21284e99b9ffdc8dfd0bf3a3e2e02006d86f975 /hosts/vidhar/borg | |
| parent | 5f54503072b1a004b7d63c9d98876f96a94854e2 (diff) | |
| download | nixos-1b9e49bbe7bfa89cdf44506304be38a91b4fa5a1.tar nixos-1b9e49bbe7bfa89cdf44506304be38a91b4fa5a1.tar.gz nixos-1b9e49bbe7bfa89cdf44506304be38a91b4fa5a1.tar.bz2 nixos-1b9e49bbe7bfa89cdf44506304be38a91b4fa5a1.tar.xz nixos-1b9e49bbe7bfa89cdf44506304be38a91b4fa5a1.zip | |
vidhar: ...
Diffstat (limited to 'hosts/vidhar/borg')
| -rw-r--r-- | hosts/vidhar/borg/default.nix | 8 |
1 files changed, 2 insertions, 6 deletions
diff --git a/hosts/vidhar/borg/default.nix b/hosts/vidhar/borg/default.nix index 352ce887..7250c4c7 100644 --- a/hosts/vidhar/borg/default.nix +++ b/hosts/vidhar/borg/default.nix | |||
| @@ -11,7 +11,7 @@ let | |||
| 11 | Host yggdrasil.borgbase | 11 | Host yggdrasil.borgbase |
| 12 | HostName nx69hpl8.repo.borgbase.com | 12 | HostName nx69hpl8.repo.borgbase.com |
| 13 | User nx69hpl8 | 13 | User nx69hpl8 |
| 14 | IdentityFile /run/credentials/${serviceName}.service/ssh-identity | 14 | IdentityFile ${config.sops.secrets."append.borgbase".path} |
| 15 | IdentitiesOnly yes | 15 | IdentitiesOnly yes |
| 16 | 16 | ||
| 17 | BatchMode yes | 17 | BatchMode yes |
| @@ -33,13 +33,9 @@ let | |||
| 33 | "BORG_CACHE_DIR=/var/lib/borg/cache" | 33 | "BORG_CACHE_DIR=/var/lib/borg/cache" |
| 34 | "BORG_SECURITY_DIR=/var/lib/borg/security" | 34 | "BORG_SECURITY_DIR=/var/lib/borg/security" |
| 35 | "BORG_KEYS_DIR=/var/lib/borg/keys" | 35 | "BORG_KEYS_DIR=/var/lib/borg/keys" |
| 36 | "BORG_KEY_FILE=/run/credentials/${serviceName}.service/keyfile" | 36 | "BORG_KEY_FILE=${config.sops.secrets."yggdrasil.borgkey".path}" |
| 37 | "BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK=yes" | 37 | "BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK=yes" |
| 38 | ]; | 38 | ]; |
| 39 | LoadCredential = [ | ||
| 40 | "ssh-identity:${config.sops.secrets."append.borgbase".path}" | ||
| 41 | "keyfile:${config.sops.secrets."yggdrasil.borgkey".path}" | ||
| 42 | ]; | ||
| 43 | }; | 39 | }; |
| 44 | }; | 40 | }; |
| 45 | 41 | ||
