foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 10:58:02 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

tasks: add prefix for sops secrets key path

Browse Source
This commit is contained in:
Gabriel Arazas 2023-07-05 13:04:52 +08:00
parent 2677400a43
commit 240515ed3b
No known key found for this signature in database
GPG Key ID: ADE0C41DAB221FCC
2 changed files with 16 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
modules/nixos/tasks/backup-archive/default.nix
View File

@ -44,16 +44,18 @@ in
lib.mkEnableOption "backup setup with BorgBackup"; lib.mkEnableOption "backup setup with BorgBackup";
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
sops.secrets = lib.getSecrets (lib.getSecret "backup-archive.yaml") { sops.secrets = lib.getSecrets
"borg-backup/patterns/home" = { }; (lib.getSecret "backup-archive.yaml")
"borg-backup/patterns/etc" = { }; (lib.attachSopsPathPrefix "borg-backup" {
"borg-backup/patterns/keys" = { }; "patterns/home" = { };
"borg-backup/patterns/remote-backup" = { }; "patterns/etc" = { };
"borg-backup/repos/archive/password" = { }; "patterns/keys" = { };
"borg-backup/repos/external-drive/password" = { }; "patterns/remote-backup" = { };
"borg-backup/repos/hetzner-box/password" = { }; "repos/archive/password" = { };
"borg-backup/ssh-key" = { }; "repos/external-drive/password" = { };
}; "repos/hetzner-box/password" = { };
"ssh-key" = { };
});
profiles.filesystem = { profiles.filesystem = {
archive.enable = true; archive.enable = true;

7
modules/nixos/tasks/multimedia-archive/default.nix
View File

@ -93,9 +93,10 @@ in
{ {
environment.systemPackages = [ ytdlpArchiveVariant ]; environment.systemPackages = [ ytdlpArchiveVariant ];
sops.secrets = lib.getSecrets (lib.getSecret "multimedia-archive.yaml") { sops.secrets = lib.getSecrets (lib.getSecret "multimedia-archive.yaml")
"multimedia-archive/secrets-config" = { }; (lib.attachSopsPathPrefix "multimedia-archive" {
}; "secrets-config" = { };
});
profiles.filesystem.archive.enable = true; profiles.filesystem.archive.enable = true;