john/dendritic
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

broke out the password file

Browse Source
This commit is contained in:
John Lancaster
2026-03-17 13:05:23 -05:00
parent d9f1d9593b
commit f3b503fc9e
1 changed files with 4 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
modules/hosts/john-pc-ubuntu.nix
View File

@@ -11,6 +11,7 @@ in
certDir = "${config.mtls.certDir}"; certDir = "${config.mtls.certDir}";
CACert = "${certDir}/root_ca.crt"; CACert = "${certDir}/root_ca.crt";
mtlsBundle = "${certDir}/${config.mtls.bundleFilename}"; mtlsBundle = "${certDir}/${config.mtls.bundleFilename}";
resticPasswordFile = "${config.xdg.configHome}/restic/password.txt";
in in
{ {
imports = with inputs.self.modules.homeManager; [ imports = with inputs.self.modules.homeManager; [
@@ -53,7 +54,6 @@ in
# TODO: Add host-specific settings here: # TODO: Add host-specific settings here:
# - sops secret for `restic_password/john_ubuntu` # - sops secret for `restic_password/john_ubuntu`
# - resticprofile profile definition
# - zsh RESTIC* session variables # - zsh RESTIC* session variables
# TODO: make this more restrictive, rather than allowing all unfree packages # TODO: make this more restrictive, rather than allowing all unfree packages
@@ -78,15 +78,12 @@ in
}; };
}; };
sops.secrets."restic_password/john_ubuntu" = { sops.secrets."restic_password/john_ubuntu" = {
path = "${config.xdg.configHome}/restic/password.txt"; path = resticPasswordFile;
mode = "0400"; mode = "0400";
}; };
restic = { restic = {
passwordFile = "${config.xdg.configHome}/restic/password.txt"; passwordFile = resticPasswordFile;
paths = [ paths = [ "${config.xdg.userDirs.documents}" "/conf" ];
"${config.xdg.userDirs.documents}"
"/conf"
];
exclude = [ exclude = [
"/home/*/Pictures" "/home/*/Pictures"
"/home/*/Videos" "/home/*/Videos"
@@ -95,25 +92,6 @@ in
"/home/john/john-nas" "/home/john/john-nas"
]; ];
}; };
# programs.resticprofile = {
# enable= true;
# profiles = {
# default = {
# "inherit" = "base";
# repository = "rest:https://soteria.john-stream.com/john-ubuntu";
# cacert = "${CACert}";
# tls-client-cert = "${mtlsBundle}";
# backup = {
# source = [
# "${config.xdg.userDirs.documents}"
# "/conf"
# ];
# schedule = "*-*-* *:15,30,45:00";
# };
# };
# };
# };
}; };
flake.homeConfigurations."${hostname}" = inputs.home-manager.lib.homeManagerConfiguration { flake.homeConfigurations."${hostname}" = inputs.home-manager.lib.homeManagerConfiguration {