diff options
Diffstat (limited to 'hosts/vidhar/borg/default.nix')
-rw-r--r-- | hosts/vidhar/borg/default.nix | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/hosts/vidhar/borg/default.nix b/hosts/vidhar/borg/default.nix index 7250c4c7..352ce887 100644 --- a/hosts/vidhar/borg/default.nix +++ b/hosts/vidhar/borg/default.nix | |||
@@ -11,7 +11,7 @@ let | |||
11 | Host yggdrasil.borgbase | 11 | Host yggdrasil.borgbase |
12 | HostName nx69hpl8.repo.borgbase.com | 12 | HostName nx69hpl8.repo.borgbase.com |
13 | User nx69hpl8 | 13 | User nx69hpl8 |
14 | IdentityFile ${config.sops.secrets."append.borgbase".path} | 14 | IdentityFile /run/credentials/${serviceName}.service/ssh-identity |
15 | IdentitiesOnly yes | 15 | IdentitiesOnly yes |
16 | 16 | ||
17 | BatchMode yes | 17 | BatchMode yes |
@@ -33,9 +33,13 @@ let | |||
33 | "BORG_CACHE_DIR=/var/lib/borg/cache" | 33 | "BORG_CACHE_DIR=/var/lib/borg/cache" |
34 | "BORG_SECURITY_DIR=/var/lib/borg/security" | 34 | "BORG_SECURITY_DIR=/var/lib/borg/security" |
35 | "BORG_KEYS_DIR=/var/lib/borg/keys" | 35 | "BORG_KEYS_DIR=/var/lib/borg/keys" |
36 | "BORG_KEY_FILE=${config.sops.secrets."yggdrasil.borgkey".path}" | 36 | "BORG_KEY_FILE=/run/credentials/${serviceName}.service/keyfile" |
37 | "BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK=yes" | 37 | "BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK=yes" |
38 | ]; | 38 | ]; |
39 | LoadCredential = [ | ||
40 | "ssh-identity:${config.sops.secrets."append.borgbase".path}" | ||
41 | "keyfile:${config.sops.secrets."yggdrasil.borgkey".path}" | ||
42 | ]; | ||
39 | }; | 43 | }; |
40 | }; | 44 | }; |
41 | 45 | ||