diff --git a/README.md b/README.md index 0cc5bff..34933bc 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,6 @@ TBC ## TODO's ### In Progress -- Encrypt Backups - Root on `tmpfs` ### Urgent diff --git a/services/akkoma.nix b/services/akkoma.nix index eb0815e..d329586 100644 --- a/services/akkoma.nix +++ b/services/akkoma.nix @@ -50,7 +50,7 @@ in { "/var/backup/postgres/akkoma.sql" ]; encryption = { - mode = "passkey"; + mode = "keyfile"; passCommand = "cat ${config.age.secrets."borg_pass".path}"; }; compression = "auto,lzma"; diff --git a/services/forgejo.nix b/services/forgejo.nix index 29e10e9..1302ade 100644 --- a/services/forgejo.nix +++ b/services/forgejo.nix @@ -25,7 +25,7 @@ in { "/var/lib/forgejo" ]; encryption = { - mode = "passkey"; + mode = "keyfile"; passCommand = "cat ${config.age.secrets."borg_pass".path}"; }; compression = "auto,lzma"; diff --git a/services/lldap.nix b/services/lldap.nix index 94ea9d7..1f6a25f 100644 --- a/services/lldap.nix +++ b/services/lldap.nix @@ -24,7 +24,7 @@ in { "/var/lib/lldap" ]; encryption = { - mode = "passkey"; + mode = "keyfile"; passCommand = "cat ${config.age.secrets."borg_pass".path}"; }; compression = "auto,lzma"; diff --git a/services/mailserver.nix b/services/mailserver.nix index e8353f6..43767a3 100644 --- a/services/mailserver.nix +++ b/services/mailserver.nix @@ -25,7 +25,7 @@ "/var/vmail/ldap" ]; encryption = { - mode = "passkey"; + mode = "keyfile"; passCommand = "cat ${config.age.secrets."borg_pass".path}"; }; compression = "auto,lzma"; diff --git a/services/nextcloud.nix b/services/nextcloud.nix index 1ad7cae..1b777cc 100644 --- a/services/nextcloud.nix +++ b/services/nextcloud.nix @@ -51,7 +51,7 @@ in { "/var/backup/postgres/nextcloud.sql" ]; encryption = { - mode = "passkey"; + mode = "keyfile"; passCommand = "cat ${config.age.secrets."borg_pass".path}"; }; compression = "auto,lzma"; diff --git a/services/paste.nix b/services/paste.nix index 19a39b8..7edb601 100644 --- a/services/paste.nix +++ b/services/paste.nix @@ -24,7 +24,7 @@ in { "/var/lib/microbin" ]; encryption = { - mode = "passkey"; + mode = "keyfile"; passCommand = "cat ${config.age.secrets."borg_pass".path}"; }; compression = "auto,lzma"; diff --git a/services/prosody.nix b/services/prosody.nix index 5de363a..0ef5ccf 100644 --- a/services/prosody.nix +++ b/services/prosody.nix @@ -55,7 +55,7 @@ "/var/lib/prosody" ]; encryption = { - mode = "passkey"; + mode = "keyfile"; passCommand = "cat ${config.age.secrets."borg_pass".path}"; }; compression = "auto,lzma"; diff --git a/services/vaultwarden.nix b/services/vaultwarden.nix index 067c2af..9345e4d 100644 --- a/services/vaultwarden.nix +++ b/services/vaultwarden.nix @@ -24,7 +24,7 @@ in { "/var/lib/vaultwarden" ]; encryption = { - mode = "passkey"; + mode = "keyfile"; passCommand = "cat ${config.age.secrets."borg_pass".path}"; }; compression = "auto,lzma";