foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 16:57:55 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
c2904c6aa4
nixos-config/secrets/secrets.nix

23 lines
895 B
Nix
Raw Normal View History

Add secret files in the public Was initially afraid of how age is secure for the publicly showing secret files (even if encrypted). We'll start with something simple for now.
2021-12-11 05:20:55 +00:00
let
system1 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG42LafAFOeh3oYz/cm6FXes0ss59/EOCXpGsYvhpI21";
backup-archive: switch to NixOS borg module While Borgmatic is great, the NixOS module does have easier configuration for various use cases such as backups in removable devices. To make this possible in Borgmatic, you have to go through some loops. Borgmatic does have easier way of indicating paths. However, in recent versions of Borg, they have the experimental feature of indicate both include and exclude through patterns which is close enough. Also, because of this, we'll be deprecating the custom borgmatic service at this point. It'll be removed once all of my NixOS-related backup setups are not using it.
2022-02-19 08:58:08 +00:00
system2 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHjRjAddjbyoM32tQhCjj8OrnqNBsXj+5D379iryupK+";
systems = [ system1 system2 ];
Add secret files in the public Was initially afraid of how age is secure for the publicly showing secret files (even if encrypted). We'll start with something simple for now.
2021-12-11 05:20:55 +00:00
user1 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMclb6WPpYRoMVqCCzQcG2XQHczB6vaIEDIHqjVsyQJi";
user2 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBhrzY7tD0ZiGoA6nnfVxRQVQox0votQ2fuHz78LjNUD";
user3 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIytwsseYS6kV8ldiUV767C2Gy7okxckdDRW4aA3q/Ku";
user4 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGtn+t2D7clY1U1rzKcSCBJjNbuJzbRArEiM3soyFcnv";
backup-archive: switch to NixOS borg module While Borgmatic is great, the NixOS module does have easier configuration for various use cases such as backups in removable devices. To make this possible in Borgmatic, you have to go through some loops. Borgmatic does have easier way of indicating paths. However, in recent versions of Borg, they have the experimental feature of indicate both include and exclude through patterns which is close enough. Also, because of this, we'll be deprecating the custom borgmatic service at this point. It'll be removed once all of my NixOS-related backup setups are not using it.
2022-02-19 08:58:08 +00:00
users = [ user1 user2 user3 user4 ];
Add secret files in the public Was initially afraid of how age is secure for the publicly showing secret files (even if encrypted). We'll start with something simple for now.
2021-12-11 05:20:55 +00:00
in {
backup-archive: switch to NixOS borg module While Borgmatic is great, the NixOS module does have easier configuration for various use cases such as backups in removable devices. To make this possible in Borgmatic, you have to go through some loops. Borgmatic does have easier way of indicating paths. However, in recent versions of Borg, they have the experimental feature of indicate both include and exclude through patterns which is close enough. Also, because of this, we'll be deprecating the custom borgmatic service at this point. It'll be removed once all of my NixOS-related backup setups are not using it.
2022-02-19 08:58:08 +00:00
"archive/borg-patterns".publicKeys = users ++ systems;
"archive/borg-patterns-local".publicKeys = users ++ systems;
"archive/password".publicKeys = users ++ systems;
"archive/key".publicKeys = users ++ systems;
Add secret files in the public Was initially afraid of how age is secure for the publicly showing secret files (even if encrypted). We'll start with something simple for now.
2021-12-11 05:20:55 +00:00
}
Reference in New Issue Copy Permalink