use backup VLAN and configure DDNS

nixos/ninurta/configuration.nix

@@ -76,6 +76,8 @@ in
   };
 
   dadada.ddns.domains = [ "backup1.dadada.li" ];
+  dadada.ddns.credentialsPath = config.age.secrets."ddns-credentials".path;
+  dadada.ddns.interface = "backup";
 
   dadada.borgServer = {
     enable = true;
@@ -118,6 +120,11 @@ in
     location = "/var/backup/postgresql";
   };
 
+  age.secrets."ddns-credentials" = {
+    file = "${secretsPath}/ddns-credentials.age";
+    mode = "400";
+  };
+
   age.secrets."ninurta-backup-passphrase" = {
     file = "${secretsPath}/ninurta-backup-passphrase.age";
     mode = "400";
@@ -241,6 +248,10 @@ in
         matchConfig.Name = "enp*";
         linkConfig.MACAddressPolicy = "persistent";
       };
+      "20-backup" = {
+        matchConfig.Name = "backup";
+        linkConfig.MACAddressPolicy = "persistent";
+      };
     };
     networks = {
       "10-wlan" = {
@@ -256,6 +267,11 @@ in
         networkConfig.DHCP = "ipv4";
         linkConfig.RequiredForOnline = "routable";
       };
+      "20-backup" = {
+        matchConfig.Name = "backup";
+        networkConfig.DHCP = "ipv4";
+        linkConfig.RequiredForOnline = false;
+      };
       "10-hydra" = {
         matchConfig.Name = "hydra";
         address = [ "10.3.3.3/24" ];
@@ -316,6 +332,13 @@ in
           };
         }];
       };
+      "20-backup" = {
+        netdevConfig = {
+          Name = "backup";
+          Kind = "vlan";
+        };
+        vlanConfig.Id = 13;
+      };
     };
   };
 

secrets/ddns-credentials.age

@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 J6ROvw BhBy5hKm+udUmCgQOhVnFFaGSGOOKqxOkaZUcp7Wy3k
+itvOOCUKNo0IseolH//6Uj1zEDt207HleT1YWnDogAg
+-> ssh-ed25519 Otklkw /5YCYZwTZ//JfGJzIIizcwhqem1P/ZTDdhJFfEjQQX4
+z7WS/uHDKGyuUP+ZKVVVc8b4bybsaQH6XrxOO3vOg1Q
+-> n\fdBI(-grease -PZuR<|s w,[Y J* h~
+mwA80O5+Q8KqYJSYneiqKcP5tbDgA0GI9AuDOjbFPFcb8evizd0RJxHdw9lDtIf1
+EBddBaL+m0/JjzvGE+Y
+--- ybCpT9fTz498c//mW49ziO5Qcpl+hJGly/qm9lzZR4s
+Žùœ7#„ä:EPÍb5Ç2«è@ÿŽKùU†¡»VMÒ¿UAP_¤…J
xà‚Ð0>–™3 á
+°„¬-¦f™´’

secrets/secrets.nix

@@ -23,6 +23,7 @@ in
   "paperless.age".publicKeys = [ systems.gorgon dadada ];
   "surgat-ssh_host_ed25519_key.age".publicKeys = [ systems.surgat dadada ];
   "ninurta-initrd-ssh-key.age".publicKeys = [ systems.ninurta dadada ];
+  "ddns-credentials.age".publicKeys = [ systems.ninurta dadada ];
 } //
 backupSecrets "ninurta" //
 backupSecrets "gorgon" //