Manage secrets with sops

This commit is contained in:
2025-02-15 18:25:36 +01:00
parent 1ccc129bb6
commit 6e080e67ec
5 changed files with 124 additions and 0 deletions

View File

@@ -1,5 +1,23 @@
uberspaceify = repo.libs.uberspace.Uberspaceify(node)
repo_config_files = {}
for repo, repo_config in node.metadata.get("clerie-backup/repos").items():
repo_config_files[f'/home/{node.username}/.config/clerie-backup/{repo}/repo_password'] = {
"content": repo_config["repo_password"],
"mode": "0600",
}
repo_config_files[f'/home/{node.username}/.config/clerie-backup/{repo}/repo_url'] = {
"content": repo_config["repo_url"],
}
repo_config_files[f'/home/{node.username}/.config/clerie-backup/{repo}/auth_username'] = {
"content": repo_config["auth_username"],
}
repo_config_files[f'/home/{node.username}/.config/clerie-backup/{repo}/auth_password'] = {
"content": repo_config["auth_password"],
"mode": "0600",
}
files = uberspaceify.files({
f'/home/{node.username}/.bwdownloads/clerie-backup.sh': {
"content_type": "download",
@@ -14,6 +32,7 @@ files = uberspaceify.files({
"action:install_restic",
],
},
**repo_config_files,
})
actions = {