root/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

encrypt all borg backups

Browse source
This commit is contained in:
root 2025-11-08 19:39:54 +00:00
parent 9231d08176
commit b674bc6e1a
13 changed files with 49 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

5
services/akkoma.nix
View file

@ -49,7 +49,10 @@ in {
"/var/lib/akkoma"
"/var/backup/postgres/akkoma.sql"
];
encryption.mode = "none";
encryption = {
mode = "passkey";
passCommand = "cat ${config.age.secrets."borg_pass".path}";
};
compression = "auto,lzma";
startAt = "daily";
prune.keep = {

1
services/borg.nix
View file

@ -1,3 +1,4 @@
{
age.secrets."borg_ed25519".file = ../secrets/borg_ed25519;
age.secrets."borg_pass".file = ../secrets/borg_pass;
}

2
services/default.nix
View file

@ -15,8 +15,8 @@
./lldap.nix
./mailserver.nix
./nextcloud.nix
./prosody.nix
./paste.nix
./prosody.nix
./vaultwarden.nix
];
}

5
services/forgejo.nix
View file

@ -24,7 +24,10 @@ in {
paths = [
"/var/lib/forgejo"
];
encryption.mode = "none";
encryption = {
mode = "passkey";
passCommand = "cat ${config.age.secrets."borg_pass".path}";
};
compression = "auto,lzma";
startAt = "daily";
prune.keep = {

5
services/lldap.nix
View file

@ -23,7 +23,10 @@ in {
paths = [
"/var/lib/lldap"
];
encryption.mode = "none";
encryption = {
mode = "passkey";
passCommand = "cat ${config.age.secrets."borg_pass".path}";
};
compression = "auto,lzma";
startAt = "daily";
prune.keep = {

5
services/mailserver.nix
View file

@ -24,7 +24,10 @@
paths = [
"/var/vmail/ldap"
];
encryption.mode = "none";
encryption = {
mode = "passkey";
passCommand = "cat ${config.age.secrets."borg_pass".path}";
};
compression = "auto,lzma";
startAt = "daily";
prune.keep = {

5
services/nextcloud.nix
View file

@ -50,7 +50,10 @@ in {
"/var/lib/nextcloud"
"/var/backup/postgres/nextcloud.sql"
];
encryption.mode = "none";
encryption = {
mode = "passkey";
passCommand = "cat ${config.age.secrets."borg_pass".path}";
};
compression = "auto,lzma";
startAt = "daily";
prune.keep = {

5
services/paste.nix
View file

@ -23,7 +23,10 @@ in {
paths = [
"/var/lib/microbin"
];
encryption.mode = "none";
encryption = {
mode = "passkey";
passCommand = "cat ${config.age.secrets."borg_pass".path}";
};
compression = "auto,lzma";
startAt = "daily";
prune.keep = {

5
services/prosody.nix
View file

@ -54,7 +54,10 @@
paths = [
"/var/lib/prosody"
];
encryption.mode = "none";
encryption = {
mode = "passkey";
passCommand = "cat ${config.age.secrets."borg_pass".path}";
};
compression = "auto,lzma";
startAt = "daily";
prune.keep = {

5
services/vaultwarden.nix
View file

@ -23,7 +23,10 @@ in {
paths = [
"/var/lib/vaultwarden"
];
encryption.mode = "none";
encryption = {
mode = "passkey";
passCommand = "cat ${config.age.secrets."borg_pass".path}";
};
compression = "auto,lzma";
startAt = "daily";
prune.keep = {