diff options
| -rw-r--r-- | modules/core/wireguard.nix | 4 | ||||
| -rw-r--r-- | modules/snorlax/syncoid.nix | 14 | ||||
| -rw-r--r-- | public/syncoid-key.pub (renamed from syncoid-key.pub) | 0 | ||||
| -rw-r--r-- | public/wg-snorlax-public | 1 | ||||
| -rw-r--r-- | secrets/secrets.nix | bin | 1237 -> 1289 bytes | |||
| -rw-r--r-- | secrets/wg-snorlax-private.age | bin | 0 -> 279 bytes |
6 files changed, 19 insertions, 0 deletions
diff --git a/modules/core/wireguard.nix b/modules/core/wireguard.nix new file mode 100644 index 0000000..c8f4957 --- /dev/null +++ b/modules/core/wireguard.nix @@ -0,0 +1,4 @@ +{ config, ... }: +{ + age.secrets.wg-snorlax-private.file = ../../secrets/wg-snorlax-private.age; +} diff --git a/modules/snorlax/syncoid.nix b/modules/snorlax/syncoid.nix index 3d4654a..5328652 100644 --- a/modules/snorlax/syncoid.nix +++ b/modules/snorlax/syncoid.nix @@ -6,8 +6,22 @@ group = "syncoid"; }; + + services.sanoid.enable = true; + services.sanoid.datasets = { + "data/safe/persist" = { + autoprune = true; + autosnap = true; + hourly = 24; + daily = 7; + monthly = 1; + yearly = 1; + }; + }; + services.syncoid.enable = true; services.syncoid.sshKey = config.age.secrets.syncoid-key.path; + services.syncoid.commonArgs = ["--no-sync-snap"]; services.syncoid.commands = { "data/safe/persist".target = "ubuntu@185.107.88.38:backup/snorlax"; }; diff --git a/syncoid-key.pub b/public/syncoid-key.pub index bc2f101..bc2f101 100644 --- a/syncoid-key.pub +++ b/public/syncoid-key.pub diff --git a/public/wg-snorlax-public b/public/wg-snorlax-public new file mode 100644 index 0000000..e171753 --- /dev/null +++ b/public/wg-snorlax-public @@ -0,0 +1 @@ +lKGuofit655cRhETjO3s2k+UrjSzQqlNGUTg/6tFGk8= diff --git a/secrets/secrets.nix b/secrets/secrets.nix Binary files differindex b0a4d7c..d7f13c4 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix diff --git a/secrets/wg-snorlax-private.age b/secrets/wg-snorlax-private.age Binary files differnew file mode 100644 index 0000000..a1a2476 --- /dev/null +++ b/secrets/wg-snorlax-private.age |