vno1-oh2: backup /home/motiejus/annex2

flake.nix

@@ -84,11 +84,12 @@
           agenix.nixosModules.default
 
           {
-            age.secrets.sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
-
             age.secrets.motiejus-passwd-hash.file = ./secrets/motiejus_passwd_hash.age;
             age.secrets.root-passwd-hash.file = ./secrets/root_passwd_hash.age;
             age.secrets.zfs-passphrase-hel1-a.file = ./secrets/hel1-a/zfs-passphrase.age;
+
+            age.secrets.sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
+            age.secrets.borgbackup-password.file = ./secrets/vno1-oh2/borgbackup/password.age;
           }
         ];
 

hosts/vno1-oh2/configuration.nix

@@ -40,6 +40,20 @@
         mountpoints = ["/home"];
       };
 
+      zfsborg = {
+        enable = true;
+        passwordPath = config.age.secrets.borgbackup-password.path;
+        mountpoints = {
+          "/home" = {
+            repo = "zh2769@zh2769.rsync.net:${config.networking.hostName}.${config.networking.domain}-home-motiejus-annex2";
+            paths = [
+              "/home/.snapshot-latest/motiejus/annex2"
+            ];
+            backup_at = "*-*-* 00:05:00";
+          };
+        };
+      };
+
       unitstatus = {
         enable = true;
         email = "motiejus+alerts@jakstys.lt";

secrets.nix

@@ -18,9 +18,10 @@ in {
 
   # vno1-oh2 + motiejus
   "secrets/hel1-a/zfs-passphrase.age".publicKeys = [vno1-oh2] ++ motiejus;
+  "secrets/vno1-oh2/borgbackup/password.age".publicKeys = [vno1-oh2] ++ motiejus;
 
   # everywhere + motiejus
-  "secrets/motiejus_passwd_hash.age".publicKeys = [hel1-a vno1-oh2] ++ motiejus;
-  "secrets/root_passwd_hash.age".publicKeys = [hel1-a vno1-oh2] ++ motiejus;
-  "secrets/postfix_sasl_passwd.age".publicKeys = [hel1-a vno1-oh2] ++ motiejus;
+  "secrets/motiejus_passwd_hash.age".publicKeys = systems ++ motiejus;
+  "secrets/root_passwd_hash.age".publicKeys = systems ++ motiejus;
+  "secrets/postfix_sasl_passwd.age".publicKeys = systems ++ motiejus;
 }

secrets/vno1-oh2/borgbackup/password.age

@@ -0,0 +1,14 @@
+age-encryption.org/v1
+-> ssh-ed25519 gJrHQg j7sUOhDLKi30GrtR7n5U0aayKmosVJCRvMZOUosj8gA
+wtR/TBANJlef2ro6jZFF8I32fOoIoCkv0lPTxXyAGbU
+-> X25519 gA1mX6nFahyHt3q50YA8DZPBnIs7L6KqK2k4dpDfHDg
+iLFQiOjmLxyVWtYfS5kZz+/+Sk3dCOcCiAIaRtJFTAs
+-> piv-p256 +y2G/w Awvvi5nJhm9Qw5Ud0cSuC+IfNkuiYDQQuIEw5AZXKlfB
+HMjBVqbxgW2/l6//EDXo8mb0FD1DjvOxvMcUdgRDLow
+-> piv-p256 jNqd3A Al9AHVU/7lRJfXr/qwc636wiw8r3bBW/PzDb3V1FYtQj
+Q1WM/FuwFaRRnMqbHthRZBa+D0EgGyWKTPpXrMxrhL8
+-> `Y}e-grease
+D69Yt9zk5GBadq1OQem1ZOeWk0BkYlUhK9vGqeN6jyU
+--- 19G2cDXZ2BR1pMUL7/F1QZlA+l9Pl2fWJiTzC6ANXWw
+€•¶”ìí<ó;GB‘t8bý¶%E/^ÎYH¾~¸3r€È
+=ÐÛÅ6Í¿¡y^R×