Add defelo restic repo

Author: Defelo

hosts/prod/default.nix

@@ -31,10 +31,27 @@
       repositoryPasswordFile = config.sops.secrets."backup/box/repository-password".path;
       sshKeyFile = config.sops.secrets."ssh/private-key".path;
     };
+    defelo = {
+      repository = "rest:https://backup.defelo.de/academy-prod";
+      repositoryPasswordFile = config.sops.secrets."backup/defelo/repository-password".path;
+      environmentFile = config.sops.templates."backup/defelo".path;
+    };
   };
 
-  sops.secrets = {
-    "ssh/private-key".path = "/root/.ssh/id_ed25519";
-    "backup/box/repository-password" = {};
+  networking.hosts."10.23.1.2" = ["backup.defelo.de"];
+
+  sops = {
+    secrets = {
+      "ssh/private-key".path = "/root/.ssh/id_ed25519";
+      "backup/box/repository-password" = {};
+      "backup/defelo/repository-password" = {};
+      "backup/defelo/rest-password" = {};
+    };
+    templates = {
+      "backup/defelo".content = ''
+        RESTIC_REST_USERNAME=academy-prod
+        RESTIC_REST_PASSWORD=${config.sops.placeholder."backup/defelo/rest-password"}
+      '';
+    };
   };
 }

hosts/prod/secrets.yml

@@ -42,6 +42,9 @@ academy-backend:
 backup:
     box:
         repository-password: ENC[AES256_GCM,data:+tuWs+H4m4XP+itLopN5UmM9pqs25WTTpLGgjg9D4P8wPN6xlMHC2/kNgWg6LtmDCHq5JbmBACzRwo/x3+DsXB++HErbbXo1ZnXoUTncB4lVgkeUYWjHM3WA9sBleTxSOoPfbr2gPYRlcP5tS7GMAK47vZ/3MC3j3qQHiAc6JTk=,iv:LBTQE/BTCVkKIriA+st6ak0zalKiiBCBWONyzaSVAN8=,tag:Cmi2FsZod5niytPw4DAWdw==,type:str]
+    defelo:
+        repository-password: ENC[AES256_GCM,data:bVqQ4OB5X/6t7YMjhZGJREdSaePLZaiHg9c/AN/TMgWaVqPRw6vF06OUVDZg2asfIG21CgN90RdIufy4rQabl3Mf31xXVE7qkRkYkHvzPyTNRlnaXdToj40SNVhZmrrd+4CQSVOtMkE+860RB5Sc7yaiXYlBOpHcQAJm/3NuUcE=,iv:aCjLsRUHzusy6azeMQBSr4j7yMYMtkVP0vHQYpOrDfU=,tag:wg8vucEN9hfC6XnisFFWpA==,type:str]
+        rest-password: ENC[AES256_GCM,data:kx36AvboBw0dU9SAWCRF5mAX5Wl9KUpRvrRozUUKhBcbPHvEq327rII8yVf2JUnMoerH3KNF3C7jQOaEWHE8OouM9mpJWyyWGH/IVh2GCVg8dDrRNuvlnRZy7vMaiNZFnRDt3CEPNx++8tMPqPyTBIumhi9QZHfEWgpVOfNrbpw=,iv:8PEsp8D+0M1qSf0nxLt+Qo/JO3fQlY8jfqJs2wZ9UQc=,tag:cdzl1V5FvlYzzLQjA3kBhw==,type:str]
 restic:
     prod: ENC[AES256_GCM,data:bzpgsMVfTkKAsnSiq2udHA/V1TELSN3ykMRefAk+DB77nox6PIvB7iFUuD1h8B/Tg6gtWDbWkl/jUNTj+TbY0GfLSAMzmSHlmCpQodRMYSiVVQkXYI5KAh+e4B+f9N8QrejcyjdwhQfVG+/fEyLwU+I502yRbrhLIndOjO+glng=,iv:UC89D2KRnbRRw7qEPVZ9R5/vP7i+jYcV4i29PlD0geU=,tag:xV0uoK93Dkh1sPW/GqfbCw==,type:str]
     test: ENC[AES256_GCM,data:sFzaPY0JG8Ur9iIo1NflCId74ArBJ44ajNntEL7tMNX1VieOlkHz3rOUEUMrzR5uSuvAWYDXncBiCZ074ecaNV4YSUCaOex3gY53J/6mlbFqwCm7ao+adE7Sawgm62j5oN0LPSdC0PyDfEuWxAez+4U/1DjmCHbgyDFmKDSLfBg=,iv:PZq60NRg1EngL4VcXisbTVoi7dN08lKkCbCnv9Bjcv8=,tag:5BwkeNBLrMEfcN5VsYOGAA==,type:str]
@@ -60,8 +63,8 @@ sops:
             Tk96anAyOEFGd1plUlp4SU5LbE5TT1UK6SPKztdzU5K1FjQ5sFjUnF4HK8cAFqh1
             YR7o5tur1y/bLMESGS7/j7ofST96NuyU+EVgs/lt0Rd0Voh1Q8aKKQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-09-09T20:45:29Z"
-    mac: ENC[AES256_GCM,data:+8BCsan1ic4jWyqRXuwkFCWnI6YO5RS3wrM1gGaOhHItvAqYHFRtAQ5MD1skWDxN3GKdR+v+5CmsrUOVn9g/2u+m5Iwvs2t79PXQydVVmEQqpYaTWor7fRdifRHnLJmj/Q1bgizBV6pPhIOoJJ9rK9utf6ayTDHaATEvgCBJrgs=,iv:vCW7xFUMZUw6LGUyiXot7BLLOZAkSolTuG/1MKCcrlw=,tag:rsfxOk4D+Z/R0lU0Y0Srww==,type:str]
+    lastmodified: "2024-09-09T21:02:16Z"
+    mac: ENC[AES256_GCM,data:3ACY9Qky9UMIZthr98sfo7GqQEfwbJorSuyR1hxZPljMhZC4fzflqd2bu7cl1uBGddmeY8k5hemK9KrP+uhXcDb5JcnxxkGoVBoEjKyy0C0H0Y7rHKfl8T6MdY9n7tAT4tFccpJdS5ey6IMB0ChPC+WYpuHLJPVi1jnQg0g7XRY=,iv:2Va/a62je7r34SQzMPXirwJUhS5ofgbMlfYeAXWxFik=,tag:Jcd8jL+dikCCFcwsXWwgJg==,type:str]
     pgp:
         - created_at: "2024-09-09T14:34:26Z"
           enc: |-