diff --git a/modules/backup.nix b/modules/backup.nix index 8ab45fef..3980262d 100644 --- a/modules/backup.nix +++ b/modules/backup.nix @@ -1,4 +1,3 @@ -# Assumes the remote borg backup server has already been initialized # TODO: # This currently works on a per host basis, and the host file has to define all the locations it wants to back up. # Ideally, this would create a job for each profile instead, so the backup strategy is included in the profile regardless of host diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 11e7c3ec..9ac323cf 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -3,13 +3,15 @@ let user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItTdCyYVur6LzRQf08JZUcEAr23H7fTRRmDJOzoOc6A anish@curve"; system = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMPcqWQ/L5nLTsBFHArl3AJb9xynhfsKenb5h0NNuMV root@curve"; mossnet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAA0bsVbdQR6iWNLKIiID57A1+dVXC58Dtf5cSXg6/JF root@box"; + curve = [ system user ]; allKeys = [ system user mossnet ]; systemOnly = [ system mossnet ]; in { "fastmail.age".publicKeys = allKeys; "mossnet.age".publicKeys = allKeys; - "curve-wg.age".publicKeys = allKeys; + "curve-wg.age".publicKeys = curve; + # "box-wg.age".publicKeys = [ mossnet ]; # "wallabag.age".publicKeys = [ mossnet ]; "borg-password.age".publicKeys = systemOnly; }