diff options
-rw-r--r-- | hosts/vidhar/borg/default.nix | 8 |
1 files changed, 2 insertions, 6 deletions
diff --git a/hosts/vidhar/borg/default.nix b/hosts/vidhar/borg/default.nix index 352ce887..7250c4c7 100644 --- a/hosts/vidhar/borg/default.nix +++ b/hosts/vidhar/borg/default.nix | |||
@@ -11,7 +11,7 @@ let | |||
11 | Host yggdrasil.borgbase | 11 | Host yggdrasil.borgbase |
12 | HostName nx69hpl8.repo.borgbase.com | 12 | HostName nx69hpl8.repo.borgbase.com |
13 | User nx69hpl8 | 13 | User nx69hpl8 |
14 | IdentityFile /run/credentials/${serviceName}.service/ssh-identity | 14 | IdentityFile ${config.sops.secrets."append.borgbase".path} |
15 | IdentitiesOnly yes | 15 | IdentitiesOnly yes |
16 | 16 | ||
17 | BatchMode yes | 17 | BatchMode yes |
@@ -33,13 +33,9 @@ let | |||
33 | "BORG_CACHE_DIR=/var/lib/borg/cache" | 33 | "BORG_CACHE_DIR=/var/lib/borg/cache" |
34 | "BORG_SECURITY_DIR=/var/lib/borg/security" | 34 | "BORG_SECURITY_DIR=/var/lib/borg/security" |
35 | "BORG_KEYS_DIR=/var/lib/borg/keys" | 35 | "BORG_KEYS_DIR=/var/lib/borg/keys" |
36 | "BORG_KEY_FILE=/run/credentials/${serviceName}.service/keyfile" | 36 | "BORG_KEY_FILE=${config.sops.secrets."yggdrasil.borgkey".path}" |
37 | "BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK=yes" | 37 | "BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK=yes" |
38 | ]; | 38 | ]; |
39 | LoadCredential = [ | ||
40 | "ssh-identity:${config.sops.secrets."append.borgbase".path}" | ||
41 | "keyfile:${config.sops.secrets."yggdrasil.borgkey".path}" | ||
42 | ]; | ||
43 | }; | 39 | }; |
44 | }; | 40 | }; |
45 | 41 | ||