From 0738d51bee8dfe1ee495b8d2d23a14bf6181bfae Mon Sep 17 00:00:00 2001 From: Crony Akatsuki Date: Sun, 22 Jun 2025 12:37:25 +0200 Subject: [PATCH] feat(desktop): backblaze restic backup. --- modules/linux/home-manager/restic.nix | 20 ++++++++++++++++++++ modules/linux/home-manager/secrets.nix | 9 +++++++++ secrets/restic-backblaze-env.age | 22 ++++++++++++++++++++++ secrets/restic-backblaze-pass.age | Bin 0 -> 1295 bytes secrets/restic-backblaze-repo.age | 21 +++++++++++++++++++++ secrets/secrets.nix | 3 +++ 6 files changed, 75 insertions(+) create mode 100644 secrets/restic-backblaze-env.age create mode 100644 secrets/restic-backblaze-pass.age create mode 100644 secrets/restic-backblaze-repo.age diff --git a/modules/linux/home-manager/restic.nix b/modules/linux/home-manager/restic.nix index 8cddd58..93f595f 100644 --- a/modules/linux/home-manager/restic.nix +++ b/modules/linux/home-manager/restic.nix @@ -37,6 +37,26 @@ ]; repository = "/home/crony/.local/backup"; }; + backblaze = { + initialize = true; + passwordFile = "/run/user/1000/agenix/restic-backblaze-pass"; + paths = [ + "/home/crony/.face" + "/home/crony/.librewolf" + "/home/crony/.ssh" + "/home/crony/.config/heroic" + "/home/crony/.config/nbfc.json" + "/home/crony/.config/OpenTabletDriver" + "/home/crony/.config/tridactyl" + "/home/crony/.local/share/gnupg" + "/home/crony/.local/share/osu" + "/home/crony/docs/sync" + "/home/crony/docs/wireguard-keys" + "/home/crony/pics" + ]; + repositoryFile = "/run/user/1000/agenix/restic-backblaze-repo"; + environmentFile = "/run/user/1000/agenix/restic-backblaze-env"; + }; }; }; diff --git a/modules/linux/home-manager/secrets.nix b/modules/linux/home-manager/secrets.nix index 7baf8c5..361c7cc 100644 --- a/modules/linux/home-manager/secrets.nix +++ b/modules/linux/home-manager/secrets.nix @@ -12,6 +12,15 @@ restic-local-pass = { file = ../../../secrets/restic-local-pass.age; }; + restic-backblaze-pass = { + file = ../../../secrets/restic-backblaze-pass.age; + }; + restic-backblaze-repo = { + file = ../../../secrets/restic-backblaze-repo.age; + }; + restic-backblaze-env = { + file = ../../../secrets/restic-backblaze-env.age; + }; }; identityPaths = ["/home/crony/.ssh/main" "/root/.ssh/id_ed25519"]; }; diff --git a/secrets/restic-backblaze-env.age b/secrets/restic-backblaze-env.age new file mode 100644 index 0000000..6cc3e1e --- /dev/null +++ b/secrets/restic-backblaze-env.age @@ -0,0 +1,22 @@ +age-encryption.org/v1 +-> ssh-ed25519 2P4nKw ai+7gzPuVpiZepovG+RPk9mSmA6jHrOZKnelkWsXpU4 +qVfZ+bwLXgN9HYARkVM9h3zzctmCmewE+8KNvMODKbQ +-> ssh-ed25519 6+hQpQ 7lHed5848sOtYQ3Esuysuorxm/xJGJYrBtbAnG/P6G8 +O4fRotEP14rB/5uF/Rw2TGl6PXuxiIo8ELC5mCwH32U +-> ssh-ed25519 l/ODWA LIMY30qUKbHiwbuRgbEsv6ROZqEZIyCS0k1OUA7fDWE +hy2c6d4IsmHIeL8uvU7eAoz5bsSPF6gbE/+txBI/hO8 +-> ssh-ed25519 7+5K3Q iEOfZXe/0L7VXjzunGn9cCgTabaMCrK9aquJORYOanI +UwudjxSlzqMhSCLx2QsdePHMGQNEVeGqfJAyg5qQwKA +-> ssh-ed25519 Ow0TGw xlvXYnivAvCbNrHIMwx2nv4YiNcxvExY5RVl76eIWwU +o1joasMlUupRzTc2Vzm/TCdzPNj28cuRj+prDkD1gmo +-> ssh-ed25519 cEINMA wAZ1I70VYP+JKklzF802WL8k2lik76W4mpRtwCkMChE +5Stye4MK5GopD7t1Qy1+y+dvLUKh9/GIAxNg6TjAWJE +-> ssh-ed25519 qbMKrQ 24eXITzgD3cKWC3xjTzWd8ob4F8ouzV/DySymDXkcB4 +D2t9p5rWTXZDU959JYMPXOtXXcY15jcVWIl6sUiG4MI +-> ssh-ed25519 GNZYRg 5hONuKwDp2C3tivjuBgq3Lyx0zMUGblIR11ioRetuFo +Ik+dlgFbvqcNaGqICDf6xIeGxcOCfmdr+y2CNWe6FPk +-> ssh-ed25519 fd/ZLQ MylH7t0hK7VqfDh0VBhHxG2BYaizcSEJ3yTJm4pAymQ +0YSTzhOupaznYPmJwfvsNNgMdjFxEFBXtyq1xugCpSA +--- o8UKtXSrK5WeYCwNlWd+kTPK/KOYqfD402hDWII/JJk +p1Ð)ŽÌ¶šÐƒB·Å ŽÝ·}ã—\”ÏÛ6gU‰^¥Cßs­%g7 +ÅÕšÔdÑácfR³*ÝVŽ5ÝÓ=‰,}ê¨"tßÐÿT•ÜÌÔ¦LcnV'<Ô‰~’ŠÉÙä/nàYPå7‰× g8Ò­,ÔðžZÞÙ÷¯Ú ¡ˆ \ No newline at end of file diff --git a/secrets/restic-backblaze-pass.age b/secrets/restic-backblaze-pass.age new file mode 100644 index 0000000000000000000000000000000000000000..fcad73abb40e88d2be2cf1e74b926de062df9af0 GIT binary patch literal 1295 zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSP3NXp@E?3Ad_sw_9 zG4s++3QDd_O04wNH!CxD4h{+nsB|vLv?vO8bIOZI%PIGAapiI^^hq%d$_UPONsK7Y z^K*78G%(3=PmK!o^zq3Fu?#J94zX}d4s_2=$ws%$Ogkg6AW$JaEuhTBKh!ZfH#jrG zG2JJ{$I>&?r^2!%qtw*XQajnvG`F%UvA{ehJe@1NBCt3j$ThGuz{R}6sMM&cB(KWM zG|(yA(z4JmDcLbCIis-1E6LO{)d1bL9DRS6a7P8pNc{@)d|%JuQhb9c#cHz+G{D={nda7nTB&JXf6Fb_`(cXcVx)iy!5 zE!ox6&(~2QA~&%zIV~m7#~?h*yt35aNI%IrGAl2_GS$@5J3leNJl88IzalLoCAXZb z!qG85QQJ5oJjAP5JJdBPu&g-6)FQ1cEYHNp&#ffiD>$pfA~PtsDiI^z3X^=jivktG zLeuqK^3ziMEG!el@*@nBs;csR%e{guQ-g9cjZ6ZJDk~!^GR$4PaW#Loi zA7P;Ho*!JAl$+!iF*X?xz*|(o*!Jd;%3L%luL@i!;ic^Gm}$(kcT( zi;Tk4Jc3FM!g9*W^TP`=oxHsweDuTef?T=Mj3SL9yz>LJGyNhhD$MoGE8V zEAqn4E8R<+^PNhaEJC?<2SxtPt=u|cA7`>f?*sL-hd33_s&2c)+_dh;zjHSp)d@Yd5$K0nd$O$?Lqxbxk3 z`ici`>t^{*$Ow>lT$H_oA^eZA@+r@4UBV}NRzBUeHo@_f>w{k3ZIwrqoQ}0@*z0ie zyU}0E_m@cmMzZ literal 0 HcmV?d00001 diff --git a/secrets/restic-backblaze-repo.age b/secrets/restic-backblaze-repo.age new file mode 100644 index 0000000..7d5479a --- /dev/null +++ b/secrets/restic-backblaze-repo.age @@ -0,0 +1,21 @@ +age-encryption.org/v1 +-> ssh-ed25519 2P4nKw IeMpnh67CKdC069MgzZLuZrxKqfRRo5pSphulCOs6lI +B/TuAZWysLqqdZtfSi8c8Oxu09NNe+0jkgJu4yDgjdQ +-> ssh-ed25519 6+hQpQ nDYhh4Wb2gYFJBfm6Qh3oQGEeN2h7Vi9Qgo0FqUScWI +1QtgUdf98AvmHmGflHh1lgGtDMjJvb4oRDO3HT/Wr9w +-> ssh-ed25519 l/ODWA mXqqa1ouoHxpTfe2szUqwlRyWVQUaaNp/i6GrLIexTw +Pw8G0P4B/5YJ2XrtJ5xaOhEx2L1TcwqbKInr2hyZ4/I +-> ssh-ed25519 7+5K3Q tbXEsx4k9e4e5P2f3OkC7TJzilARrVeYWQAgA9JQvAM +cejO3w8rNl16YFHBUORJW07cGmkGz+cRRe1HeDNQ4sQ +-> ssh-ed25519 Ow0TGw 5OWU8ZwcfJJK91pDA/9rkBP0Xv6Ms/R/+6hzYRH2Tm0 +eiLdFxuc2cp/sZnI9BJNOoXFI2LIO6ES3SFwvib0PBY +-> ssh-ed25519 cEINMA bLjUqZUPrLvnYdT6gLswA3HSMfljbis/m12/GWPDfCc +zXctFhpVJyVgX2DYJvSTTLUOjjL7qWXcaXZRinUMx2g +-> ssh-ed25519 qbMKrQ 85+89d0eMiP6f12GrgVXhEzsYuYqEDMcygFWwtkrKTs +dQrLWA+swAS4SZRtrLArQ5L/OJ9WDybdKWtahLO+mU4 +-> ssh-ed25519 GNZYRg HZVuaDpxjkt7rPvQdbXJYyHmAczJkHhssc1Xc7sCr38 +MOfDmdSAlyi+WfL83mq0qK4vL0TrsnePLOpJ0xHJpf4 +-> ssh-ed25519 fd/ZLQ 618BCKlXt3Z8iqQfV4lTjvaU8/8KVrkQZfm6eJ+IVzw +ABLYFTLtscuRa81ucaM4pUywWQsWSGc2Idebv/44Cc4 +--- Rko47VrUDKTLH7N/MoeJ7Wx2yJO3fY9T4muNiY2iYbY +ˆ@Å·[ºmå–úõ<8M­Ò±†ýˆÂ“…Y{.6 ½/'ÔjÂ'â;ëè¨x§˜¯&½‰yúòÀRU‰—ÂrÅëИšjèÝØç¸á¦ýcC.¨Z|Ë›Ù-4ÜýVŸ¡æV®l*ž¦ \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 097028c..f9e874a 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -30,4 +30,7 @@ in { "crony-passwd-servers.age".publicKeys = systems ++ users; "root-passwd.age".publicKeys = systems ++ users; "restic-local-pass.age".publicKeys = systems ++ users; + "restic-backblaze-pass.age".publicKeys = systems ++ users; + "restic-backblaze-repo.age".publicKeys = systems ++ users; + "restic-backblaze-env.age".publicKeys = systems ++ users; }