fix(secrets): fix permissions

Also moves key references into respective configs where they are used.
This commit is contained in:
Felix Schröter 2022-05-06 03:16:17 +02:00
parent 7f3a5317bd
commit 0dee8b4fa7
Signed by: felschr
GPG key ID: 671E39E6744C807D
15 changed files with 125 additions and 96 deletions

View file

@ -6,12 +6,16 @@
with lib;
with builtins;
let common = import ./common.nix { inherit config lib pkgs; };
let resticLib = import ./lib.nix { inherit config lib pkgs; };
in {
imports = [ ./common.nix ];
environment.systemPackages = with pkgs; [ restic ];
services.restic.backups.full = common.resticConfig {
services.restic.backups.full = resticLib.resticConfig {
name = "rpi4";
# TODO migrate old repository
# repository = "b2:felschr-rpi4-backup:/full";
ripgrep = true;
paths = [ "/etc/nixos" "/var/lib" "/home" ];
ignorePatterns = [