update restic key layout

This commit is contained in:
TheWanderingCrow 2025-03-18 09:20:33 -04:00
parent 11ba348a58
commit eca3549857
3 changed files with 10 additions and 10 deletions

8
flake.lock generated
View file

@ -172,11 +172,11 @@
},
"nix-secrets": {
"locked": {
"lastModified": 1741374154,
"narHash": "sha256-O/51DBBSrqx8yD9iQ5q1UBRwFTHdwrvng873h/KtPeU=",
"lastModified": 1742303949,
"narHash": "sha256-JFJmE1hnIfmUIqTQH3JoTtf5/Bws5TAEOcMviVl0QT8=",
"ref": "refs/heads/master",
"rev": "8f0feec3a43a68641fa85d95b05ec3f4bd4468a3",
"revCount": 50,
"rev": "16ceae4d06702a6ddbca2e86175b308703a7f477",
"revCount": 51,
"type": "git",
"url": "ssh://git@github.com/TheWanderingCrow/nix-secrets"
},

View file

@ -7,6 +7,10 @@ in
...
}:
lib.mkIf config.user.overseer.enable {
# Restic secrets
sops.secrets."restic/borg-base/url" = {};
sops.secrets."restic/borg-base/key" = {};
services.restic.backups.borg-base = {
user = "root";
timerConfig = {
@ -27,7 +31,7 @@ in
# trilium.nix
"/var/lib/trilium/backup"
];
repositoryFile = config.sops.secrets."restic/url".path;
passwordFile = config.sops.secrets."restic/key".path;
repositoryFile = config.sops.secrets."restic/borg-base/url".path;
passwordFile = config.sops.secrets."restic/borg-base/key".path;
};
}

View file

@ -11,8 +11,4 @@ lib.mkIf config.user.overseer.enable {
age.keyFile = "/var/lib/sops-nix/key.txt";
age.generateKey = true;
};
# Restic secrets
sops.secrets."restic/url" = {};
sops.secrets."restic/key" = {};
}