diff options
author | Profpatsch <mail@profpatsch.de> | 2022-06-26 16:18:09 +0200 |
---|---|---|
committer | Profpatsch <mail@profpatsch.de> | 2022-06-26 16:18:09 +0200 |
commit | 8cfd13c077ea127423dd2122ca6404ce039076b6 (patch) | |
tree | 3ebc610a9ab5d11290f6cbc3f40262b58302b4f3 | |
parent | f7847aca46a00b428123f6593814b2d12bd0cb3e (diff) |
machines/legosi: disable duplicity
Apparently one of its python dependencies went EOL and everything went to fuck because python is a crapfest and nixpkgs policies around it are stupid. yay.
-rw-r--r-- | machines/profpatsch/legosi.nix | 77 |
1 files changed, 38 insertions, 39 deletions
diff --git a/machines/profpatsch/legosi.nix b/machines/profpatsch/legosi.nix index 8f27d324..72709711 100644 --- a/machines/profpatsch/legosi.nix +++ b/machines/profpatsch/legosi.nix @@ -86,45 +86,44 @@ in { interfaceName = tailscaleInterface; }; - services.duplicity = { - enable = true; - frequency = "daily"; - - root = "/"; - # exclude all the system-related dirs - exclude = [ - "/bin" - "/boot" - "/dev" - "/nix" - "/proc" - "/run" - "/sys" - "/tmp" - "/usr" - # /var/lib is what we want because it contains all services, - # but let’s be generous and keep everything in /var except log - "/var/log" - ]; - - targetUrl = "b2://000efe88f7148a00000000003@profpatsch-legosi/"; - - # this uses the internal stateDirectory of the duplicity module - # Has to be set manually once of course. - secretFile = "/var/lib/duplicity/secrets"; - - extraFlags = [ - "--name" "legosi-root" - "--verbosity" "info" - "--full-if-older-than" "60D" - "--num-retries" "3" - # I hate GPG from the bottom of my heart - "--encrypt-key" gpgPublicKeyId - "--gpg-options" "--keyring ${gpgPublicKeyring} --trust-model always" - ]; - - }; - + # services.duplicity = { + # enable = true; + # frequency = "daily"; + + # root = "/"; + # # exclude all the system-related dirs + # exclude = [ + # "/bin" + # "/boot" + # "/dev" + # "/nix" + # "/proc" + # "/run" + # "/sys" + # "/tmp" + # "/usr" + # # /var/lib is what we want because it contains all services, + # # but let’s be generous and keep everything in /var except log + # "/var/log" + # ]; + + # targetUrl = "b2://000efe88f7148a00000000003@profpatsch-legosi/"; + + # # this uses the internal stateDirectory of the duplicity module + # # Has to be set manually once of course. + # secretFile = "/var/lib/duplicity/secrets"; + + # extraFlags = [ + # "--name" "legosi-root" + # "--verbosity" "info" + # "--full-if-older-than" "60D" + # "--num-retries" "3" + # # I hate GPG from the bottom of my heart + # "--encrypt-key" gpgPublicKeyId + # "--gpg-options" "--keyring ${gpgPublicKeyring} --trust-model always" + # ]; + + # }; users.users = { root.openssh.authorizedKeys.keys = [ myKey ]; |