aboutsummaryrefslogtreecommitdiff
path: root/secrets
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2025-06-30 12:58:03 -0700
committerFranck Cuny <franck@fcuny.net>2025-06-30 12:58:03 -0700
commit35e7f35d0e4809d752a5dc02c1ec3521fc452ffb (patch)
treeeccfe53fd096f3dcd9e25c2807d0bc6c444bbf78 /secrets
parentadd configuration for vm-synology (diff)
downloadinfra-35e7f35d0e4809d752a5dc02c1ec3521fc452ffb.tar.gz
backup the VM to Google Cloud Storage
For now we only backup git repositories.
Diffstat (limited to 'secrets')
-rw-r--r--secrets/restic_gcs_credentials.agebin0 -> 2688 bytes
-rw-r--r--secrets/restic_password.age7
-rw-r--r--secrets/secrets.nix11
3 files changed, 18 insertions, 0 deletions
diff --git a/secrets/restic_gcs_credentials.age b/secrets/restic_gcs_credentials.age
new file mode 100644
index 0000000..7debd57
--- /dev/null
+++ b/secrets/restic_gcs_credentials.age
Binary files differ
diff --git a/secrets/restic_password.age b/secrets/restic_password.age
new file mode 100644
index 0000000..b5c94e2
--- /dev/null
+++ b/secrets/restic_password.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 pFjJaA iHTs45YXsTQXK+OINYkkQa69zzWQ3vbvRq4BEUTcQCw
+EBhd2JKma+aZInyLyzLJXG0ceBlSxF3iXa23NtUPQ30
+-> ssh-ed25519 qRUWSw eROWQVI+Wb4tDmRMeX0ietX+cpWy248UO1sbghnXz2E
+H1+zbwjLrytYe3XAcmS34q1A+unmctOf6koVTUyc6bM
+--- lLozC4In1nPiUoXtXWH2hqfotyFnUxX+sW1k4mCkYyE
+$η2Ù(¦!{ÞmÞg9+»L4ù]·t‰4iÀt9j×9  ÃPaZqÕÖoˆuÕ \ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 9fd765f..ce03f7f 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -1,4 +1,7 @@
let
+ hosts = {
+ vm-synology = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHKZAKlqOU6bSuMaaZAsYJdZnmNASWuIbbrrOjB6yGb8 root@vm-synology";
+ };
users = {
fcuny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdyJepi/NyO6d9eP8m48Ga/gdjB5ENHRXYM1ZqFZR8t";
};
@@ -10,4 +13,12 @@ in
"users/fcuny/anthropic-api-key.age".publicKeys = [
users.fcuny
];
+ "restic_password.age".publicKeys = [
+ users.fcuny
+ hosts.vm-synology
+ ];
+ "restic_gcs_credentials.age".publicKeys = [
+ users.fcuny
+ hosts.vm-synology
+ ];
}