feat(stolas): add backup config

nixos/modules/borg-server.nix

@@ -39,6 +39,14 @@ in
         path = "${cfg.path}/gorgon";
         quota = "1T";
       };
+      "stolas" = {
+        allowSubRepos = false;
+        authorizedKeysAppendOnly = [
+          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINC/mVYd3o7oA0dsA58CgkqR40CSfeuU+rikleSrSXFz dadada@gorgon"
+        ];
+        path = "${cfg.path}/stolas";
+        quota = "1T";
+      };
       "surgat" = {
         allowSubRepos = false;
         authorizedKeysAppendOnly = [

nixos/stolas/default.nix

@@ -85,13 +85,11 @@
     settings.max-jobs = lib.mkDefault 16;
   };
 
-  # TODO dadada.backupClient.backup1.enable = true;
-  # dadada.backupClient.backup2 = {
-  #   enable = true;
-  #   passphrasePath = config.age.secrets."${config.networking.hostName}-backup-passphrase".path;
-  #   sshIdentityFile = config.age.secrets."${config.networking.hostName}-backup-ssh-key".path;
-  #   repo = "u355513-subX@u355513-subX.your-storagebox.de:/home/backup";
-  # };
+  dadada.backupClient.backup1.enable = true;
+  dadada.backupClient.backup2 = {
+    enable = true;
+    repo = "u355513-sub5@u355513-sub5.your-storagebox.de:/home/backup";
+  };
 
   programs = {
     adb.enable = true;

secrets/secrets.nix

@@ -7,6 +7,7 @@ let
     ninurta = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO8TDCzjVVO7A4k6rp+srMj0HHc5gmUOlskTBOvhMkEc root@nixos";
     pruflas = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBqZHu5ygTODgrNzcU9C2O+b8yCfVsnztV83qxXV4aA8 root@pruflas";
     surgat = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOOJ9UgAle5sX0pAawfRztckVwaQm2U8o0Bawv7cZfXE root@surgat";
+    stolas = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFV1LSH8jeMnXJ/eqhJCebbwxenJmxNoeB6UGrBmRjZk root@stolas";
   };
   backupSecrets = hostName: {
     "${hostName}-backup-passphrase.age".publicKeys = [
@@ -88,3 +89,4 @@ in
 // backupSecrets "pruflas"
 // backupSecrets "surgat"
 // backupSecrets "agares"
+// backupSecrets "stolas"

secrets/stolas-backup-passphrase.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 OgKXZA A8XAP2YQw/CnN//rHPM9m9p1A/l4IiWV1Qhc9+RHdxQ
+mcpcULPCQUMtoCiTwiAU2AXD5UVrQkF5LxZqCJ3VEMA
+-> ssh-ed25519 Otklkw UzdSM3CCvzQ4owHWWmrBfiC6NuBAu0onns6s4nlR9Vs
+UQ4TBW/4O5rVi0xpS2lAS6M7zgUcWtGlXeL+i748KYE
+--- tqrtKyZVDght0KJQZDSDVdnEL38KZjPA2xZ3LjeKlI0
+ø2Šl£C@‘þô (<28>ãŽNë3‘-igÁaH?ÿ~üF‚‰ýnòÔqÁ¸·ÇcñÉ<C3B1>œçî<ûÛ¼ñ#Fš7ÔaB%®–Ž&t·}¢vr_<î

secrets/stolas-backup-ssh-key.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 OgKXZA gTx4Ozd2BU13T8GpiBxSCZdjAwJ/zb10xqW62QMTwms
+M9y1f/ndVYnujqIDo0rocQEX/8Isg0vn97mQm8K83iE
+-> ssh-ed25519 Otklkw 2hyKMpf/Z8wgBowMgxwb77cj9B5b0/a7q4hq3CxWp0M
+jFLwfV72isKUdtr5m2n5303KZiJDKTJny9koUOHLLLg
+--- GQfIExiJTJEQTnesTVqF3X7AcorV+SH8TQ9uo5xLwso
+u`6^—ü |<7C>Ÿ&êµQ¢[KPF»ÏA†Æ‡ÑˆU*nŸ55†¶O–Øz›v…傺-C“0’Êr;6ÅJ¸‚²œC={<7B>'÷¼@Ôº9öO'b“½Æô#¬Rw-³õÔ(ØŠ<C398>RäjFÞ[=€ƒuD·3¨¸×vÚ<76>5bW¸xi†zï<>Í¢Å={þS;	rÖù.ìÎO
´ê´è2ÊÖ|˜É«¯ÉjÞtOrñº‰põžþK2à97˜æœÓY/ñŸÈèé?â8¼³‚&·øpÃÕP<C395>:g‡Çÿ<ÓÎh¡Þ*iKùRÚ¨¼É«ÛÏS<C38F>"Aíˆ+÷
+&%ð×9^„QRŠÍÿ]˜„âsô'–ðD•D‘•ŠB¦ž§·Å^¤›¡ÉÓí;<02>~ÈÎæO[
+ÇÚˆ'[õ¨Ž®œú'kª'îb ßíO_Bž %z”#Åê{ÂÇ6LD«ò<C2AB>Û8é'	Ô­Ö³ê‘^ð<>õ2Y™BL©<02>ZWsó!¿ÓHi±³Xâ–³·¨”rÙížZ!ª\•”…jéÙ€Q€ÿÄ‚îÓ<>