ops-jrz1/secrets/secrets.yaml
Dan 31d388d21c Add B2 automated backup with restic
- Add services.postgresqlBackup for daily DB dumps (2 AM)
- New modules/backup-b2.nix: restic backup to B2 (3 AM daily)
- Weekly integrity check (Sunday 4 AM)
- Retention: 7 daily, 4 weekly, 6 monthly
- B2 bucket: ops-jrz1-backup with scoped app key

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-10 13:49:59 -08:00

38 lines
3.7 KiB
YAML

matrix-registration-token: ENC[AES256_GCM,data:SiF+6nXlxpPddr83/CR0o1rs3jde6ewxKxMXpJ9t4vz6x0xaC4tFEIWh6u8xyrX/6ORqqPZr0mWsbWwNJM+MfA==,iv:Z6/irfWu8YCuSvtYmVGSkz8GhVUeuN5fP7qsVXlNUdE=,tag:fS8NfiT5ErhVMDOkKyac1w==,type:str]
acme-email: ENC[AES256_GCM,data:A97cinBoMWHpCpAM9A==,iv:VrROWl9HfVKZT4aq1T23puCUkbeoCbDRJbCqpOzCKG8=,tag:eXQ3IiMjn2njYgue1NvQog==,type:str]
slack-app-token: ENC[AES256_GCM,data:eXNpliGcPwrnc3pqRlaLmbjjVTKmJOQlchKt7uDlEEH4mWnzsm87VrRdi3usrVAJT+il7zapd+VQK5fEOcJwP1b4hGp1PvEFdiN1oofDKenRGNyptzolRA3cyhdQsCZVZA==,iv:Qc9aYgm5g7T6kG4hG9TGdK6RufosGnVbSV0IhguhHuk=,tag:fY9V4AKTcUvHKcMp/OoG2w==,type:str]
maubot-admin-password: ENC[AES256_GCM,data:C8s7rPrPI3V7NYksNVw8CW10QGR8iAnWo2yVO2i3Jv/3AU/dza3pwbu4bRQ=,iv:qVLpFC3BYQ48hem3I5msRt5s8nqf2WSGyeOIw1Ior70=,tag:nOXpD1pdb+GRBBPjhobqKg==,type:str]
maubot-secret-key: ENC[AES256_GCM,data:k8meKgyRYhYqR86GjpH0xCPJsrvKxy4LTHM4PJct0TmZnBatqpWoO6abqzPnsuyA8PHipAz4Yw7+VyXsUdifkQ==,iv:uUYuMja1X8U7FMYj1oOGVIZ/Opfoi/Zo/a7gQIS4FCQ=,tag:z8vVRohp5iREil3lW4ZoHg==,type:str]
slack-bot-token: ENC[AES256_GCM,data:2d1GNPvNwJBN8S2fBzL6E8fh6D2hGU8aFPEaNYHCfM+AhrzGctnzk3pgTOTpUWkXHDp5bCaxFGw=,iv:7lHPLQyL+GzH1siujx517BPQ+BlQXbuDbHMpaNH+MrQ=,tag:Qt/KiiFBHnbU5lz9mUWhvg==,type:str]
forgejo-admin-password: ENC[AES256_GCM,data:ih8u+gNJpYcmtWD/0voNBc+dyDf7aQaC,iv:WIrD3IgwUJZIR8BrO5ok1uL5YXdG4I+HgEzwvjnLaiw=,tag:Xon/rtoXQF1SbDtfDZYaiQ==,type:str]
forgejo-api-token: ENC[AES256_GCM,data:eOYykB65PbfMnFeW3U0l5HmV3yBtQ7pPlYdUfZsupRIO/8UTrCqfLw==,iv:8vw18fr/e8kSD2U09BN3GWzmJ7GzdSPssZDExazY6Jc=,tag:rMuAD+iqSZCfOtEWY1fJgA==,type:str]
restic:
password: ENC[AES256_GCM,data:ydVeGcvZThSYtXpMsgVxkVvykQDlvI5niy/YTHJ14h0=,iv:PLDgROTsRMbLXgnBkkPosfoJ/SV6Ejx46o8FFYZAGPQ=,tag:vxARTz5XAsaHr+jrtVjt9w==,type:str]
b2_account_id: ENC[AES256_GCM,data:Arz8ZZ8ahVNjvlPlVEbRbLzWMmLS3AXdgQ==,iv:YcOcAFIs3KjWEpMVOM7mtBGmdrh4IG47/esZIyxeUTg=,tag:eOi7Z4CW9DgzDFjjQwGsdg==,type:str]
b2_account_key: ENC[AES256_GCM,data:9jpuaRaGtGxz+Bp9wlOr5apECRorkpsC7+4+wrxUAQ==,iv:WFwKWc1yR8sU7xKVZ40RkCCGVzChGMxLLc5L6D12UBY=,tag:SwLzS6MwA0O1G6XwHo1LtA==,type:str]
b2_repo: ENC[AES256_GCM,data:JcvCGIJunXFq99mfo7+GQVjR,iv:ym7mu7yNwNZ2MuViKaEe6WXLuS58k++nFA42ZJHsbis=,tag:0mBsoVKY7aTzv4SxB8Jcyg==,type:str]
sops:
age:
- recipient: age1vuxcwvdvzl2u7w6kudqvnnf45czrnhwv9aevjq9hyjjpa409jvkqhkz32q
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuTm1DNzZjM1VmSVU2NlA0
RUFpZ2h0Snc0ZlVsc04zanBQZmcyaFh0aUc4CnNOQ0ZUS25xeTUwV1A0MzZFQzBT
NmhjVzVZR2gzb21iTFM2cDJRV0NDa3cKLS0tIG85RnRzYWQvNjNUMnN2bUJ6UUNn
Smp1ZkMwZ1RBb1NmWExYc280c20zYjAKwyChuUih0BTk7nYsit6aBkGDAzJV0xBa
gi2/bk5uLk7cW+JU46IrK9VPN6VhexDqN0k9ub3YMXNxfurn3wMNIg==
-----END AGE ENCRYPTED FILE-----
- recipient: age18ue40q4fw8uggdlfag7jf5nrawvfvsnv93nurschhuynus200yjsd775v3
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkWlVpbGFPY04wbjVhQndX
cEpuVzliTkFocUhDMGhnNmNxek9pcXNLeEFRCmNWc1dHMFBpMWcxYkg2MEdYTjRs
YjVreWpHbng0dTBIQkM2QzBHM0EwMmMKLS0tIGFkYVprTytHSEc4TXR1NGc0V2VC
TFF5cmRNSFE2ODBjOVBTemFNUzQrREEKyzPRDrmR68VKmjDLoJ89Yz+9A0tQPMB9
1+0/F+3OAbk66FTycap4E2mIqxLFWifW2h7tOfP2exxXFktCQcgmyA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-01-10T21:48:44Z"
mac: ENC[AES256_GCM,data:HGGz77ONHpz/OjwJU1+F+D+MJyHJP/UrCytjrYKTRK1pirNsJWyCwWDSKkpXvLt3vgJBlnWLgzbCk9Bp7NpYOO+QooRETdIqaZHSpEGoQjcJjY1o/8j4/THxwTb0Yh5mVZKQg39tEGIFOIcYc8HLPBLGQEbh6JGN2F/4r5PseWI=,iv:70QniATCsMmRfpdPbDspUle35Okxj1y4AhEJvY1CpQI=,tag:HnsKH/qqC9bUsk2aHSkTZQ==,type:str]
unencrypted_suffix: _unencrypted
version: 3.11.0