sync

home-manager/users/sstent/default.nix

@@ -142,6 +142,11 @@
           user = "git";
           identityFile = "~/.ssh/id_rsa_git";
         };
+        
+        "gitea.service.dc1.*" = {
+          user = "git";
+          identityFile = "~/.ssh/id_ed25519";
+        };
         "192.168.4.*" = {
           user = "root";
           extraOptions = {

hosts/StuMini-WSL/default.nix

@@ -20,5 +20,6 @@
     mnt_public.enable = false;
     syncthing.enable = true;
     wsl.enable = true;
+    restic.enable = true;
   };
 }

modules/nixos/restic/default.nix

@@ -0,0 +1,48 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}: {
+  options = {
+    custom.restic.enable = lib.mkEnableOption "restic";
+  };
+
+  config = lib.mkIf config.custom.restic.enable {
+    # Ensure the SOPS secret is defined
+    sops.secrets.restic_odroid3 = {
+      #sopsFile = ./secrets.yaml; # Adjust path to your secrets file
+      mode = "0400";
+    };
+
+    services.restic.backups.home_backup = {
+      initialize = true;
+      
+      paths = ["/home"];
+      
+      exclude = [
+        "/home/*/.cache"
+        "/home/*/keybase"
+      ];
+      
+      repository = "sftp:root@192.168.4.63:/mnt/Shares/_RESTIC_StuMiniWSLNIXOS";
+      
+      passwordFile = config.sops.secrets.restic_odroid3.path;
+      
+      pruneOpts = [
+        "--keep-daily 7"
+        "--keep-weekly 5"
+        "--keep-monthly 12"
+        "--keep-yearly 10"
+      ];
+      
+      checkOpts = ["--with-cache"];
+      
+      timerConfig = {
+        OnBootSec = "3m";
+        OnCalendar = "daily";
+        Persistent = true;
+      };
+    };
+  };
+}

secrets/host-secrets.yaml

@@ -1,10 +1,7 @@
 discogs_json: ENC[AES256_GCM,data:5Wkw2kOqbb8MF9oZ8rgEzW8+TpxSFz/ivhu+8hBdgaxIuOiPyqoxSh7beqyalDxs4lCOACaQurDrkOClWuLCK1DAOFNvfz8NmDzsYMl4N6CZ1j9DJHGEB6L7O2Bn2USAzOHOwM+e6s6bJqE=,iv:iv3g3DBXTTFU/dHC4xigSTyQ5BKoYq3NJHt7rKEUHQA=,tag:c7nCoXs/ZmSJVGekmOfT6g==,type:str]
 sstent_password: ENC[AES256_GCM,data:5reJ4dU/iXxe,iv:kpu2fIWE51uaVcStZCzMiIc/FbUjEqwslUikhaROOtI=,tag:Muq+hz0OU0MAd49Ty1vy9g==,type:str]
+restic_odroid3: ENC[AES256_GCM,data:RkhbMGthtokUjx2XHxTcyPfC3FLXTpj50g==,iv:97dDsFeKYkpRl7OddYBtIm0Q1MXIBNINgoGww4u3HL4=,tag:HMPYF0jUERGSQ/9IRZ78yg==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
         - recipient: age1jvqe2j70h97844nkz34z9k4epx3uahx50cx75ss8mty2dnxlrf7qqv9a0g
           enc: |
@@ -42,8 +39,7 @@ sops:
             ZmhNS0NEdTNQREJzUjZ4cHg5T1FMR0EK6WyAmpmYZPP0arJX4+yblIK4aFHS2JnB
             cBeWe6zs0xUKM/8fgdu31mVW4qhRIEnxA7Nuh97BabQNSMW8EKft1w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-10-21T15:30:54Z"
-    mac: ENC[AES256_GCM,data:d1vy5A5PPgVIUQosBK3vzneN4JTwS2IbMDC0fOohiE009f6kPYquJi7yvQJO5w9Qp5lvnELcNCWE5Qi8kvMcc7W0ELVy8JCJFOG/c187cnnlBLG12KQFPU638vRuYLBT5aMnfiQjkhYVmPIiFqNdUVgXRh9NpcM82lgVJxS2b1M=,iv:0JR3qCzn+rpOKzzF4nQzGmFxemMYb4XToY4VMItr9tc=,tag:ARzShR9WLoJqEq5BB5NnNg==,type:str]
-    pgp: []
+    lastmodified: "2025-12-04T17:29:19Z"
+    mac: ENC[AES256_GCM,data:lXYStM3JrqVVlhJCOIR0eM5jcbq+10ZNT+ke1qj31+xQ7VZRMrM8RvXW4r/ssEWDl32lKdq4WyGUML4zSRgSwLzN6J/oOuh5Ny2jbl1T5tD2ikykbADjPp2sbZbiSV8a/YR3ePTXWY4tTqDokxx7nvQj359k9kF0vl0Hb4gzRnM=,iv:7xm18GtJ8Tt6v5IRI1G/gWbUtwBTo7cB5d3Sp+AQ7Ek=,tag:pKh3eZ6Geyt+E0tvZUR9wA==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.11.0