Introduce agenix secrets management

2023-05-01 11:37:33 +02:00
parent ce766a8f90
commit 09b043c26c
8 changed files with 86 additions and 1 deletions
--- a/hosts/clerie-backup/restic-server.nix
+++ b/hosts/clerie-backup/restic-server.nix
@@ -8,6 +8,15 @@
    listenAddress = "[::1]:43242";
  };

+  # restic rest server does not support --htpasswd-file in the current version of nixpkgs
+  # until then we copy the secrets to the common location
+  age.secrets.restic-server-cyan-htpasswd = {
+    path = "/mnt/clerie-backup/cyan/.htpasswd";
+    symlink = false;
+    owner = "restic";
+    group = "restic";
+  };
+
  services.nginx.virtualHosts."cyan.backup.clerie.de" = {
    enableACME = true;
    forceSSL = true;