diff --git a/hosts/swan/default.nix b/hosts/swan/default.nix index 73b8cfb..e459bb0 100644 --- a/hosts/swan/default.nix +++ b/hosts/swan/default.nix @@ -41,6 +41,12 @@ nixpkgs.lib.nixosSystem { wsl.enable = false; caddy.enable = true; + backup.s3 = { + endpoint = "s3.us-west-002.backblazeb2.com"; + bucket = "noahmasur-backup"; + accessKeyId = "0026b0e73b2e2c80000000005"; + }; + # Disable passwords, only use SSH key publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+AbmjGEwITk5CK9y7+Rg27Fokgj9QEjgc9wST6MA3s"; diff --git a/modules/nixos/services/backups.nix b/modules/nixos/services/backups.nix index 026325d..06496e4 100644 --- a/modules/nixos/services/backups.nix +++ b/modules/nixos/services/backups.nix @@ -27,7 +27,7 @@ users.groups.backup = { }; secrets.backup = { - source = ../../private/backup.age; + source = ../../../private/backup.age; dest = "${config.secretsDirectory}/backup"; group = "backup"; permissions = "0440"; @@ -38,6 +38,7 @@ services.litestream = { enable = true; environmentFile = config.secrets.backup.dest; + settings = { }; }; # Wait for secret to exist