1 files changed, 18 insertions, 4 deletions

diff --git a/hosts/vidhar/pgbackrest/default.nix b/hosts/vidhar/pgbackrest/default.nix
index 49644e51..ebee2cd0 100644
--- a/hosts/vidhar/pgbackrest/default.nix
+++ b/hosts/vidhar/pgbackrest/default.nix
@@ -18,7 +18,7 @@ in {
           pg1-host-type = "tls";
           pg1-host = "pgbackrest.surtr.yggdrasil";
           pg1-host-ca-file = toString ./ca/ca.crt;
-          pg1-host-cert-file = toString ./tls.crt;
+          pg1-host-cert-file = toString ./ca/vidhar.crt;
           pg1-host-key-file = config.sops.secrets."pgbackrest.key".path;
           inherit (surtrRepoCfg) pg1-path;
 
@@ -37,6 +37,20 @@ in {
           repo2-retention-archive = 7;
         };
 
+        "srv01.uniworx.de" = {
+          pg1-host-type = "tls";
+          pg1-host = "srv01.uniworx.de";
+          pg1-host-ca-file = toString ./ca/ca.crt;
+          pg1-host-cert-file = toString ./ca/srv01.uniworx.de.crt;
+          pg1-host-key-file = config.sops.secrets."pgbackrest.key".path;
+          pg1-path = "/var/lib/postgresql/15";
+
+          repo2-path = "/var/lib/pgbackrest";
+          repo2-retention-full-type = "time";
+          repo2-retention-full = 14;
+          repo2-retention-archive = 7;
+        };
+
         "global" = {
           compress-type = "zst";
           compress-level = 9;
@@ -46,9 +60,9 @@ in {
         };
 
         "global:server" = {
-          tls-server-address = "2a03:4000:52:ada:1:1::";
+          tls-server-address = "2a03:4000:52:ada:4:1::";
           tls-server-ca-file = toString ./ca/ca.crt;
-          tls-server-cert-file = toString ./tls.crt;
+          tls-server-cert-file = toString ./ca/vidhar.crt;
           tls-server-key-file = config.sops.secrets."pgbackrest.key".path;
           tls-server-auth = ["surtr.yggdrasil=surtr"];
         };
@@ -92,7 +106,7 @@ in {
 
     sops.secrets."pgbackrest.key" = {
       format = "binary";
-      sopsFile = ./tls.key;
+      sopsFile = ./ca/vidhar.key;
       owner = "pgbackrest";
       group = "pgbackrest";
       mode = "0400";