about summary refs log tree commit diff
path: root/machines/profpatsch
diff options
context:
space:
mode:
authorProfpatsch <mail@profpatsch.de>2022-06-26 16:18:09 +0200
committerProfpatsch <mail@profpatsch.de>2022-06-26 16:18:09 +0200
commit8cfd13c077ea127423dd2122ca6404ce039076b6 (patch)
tree3ebc610a9ab5d11290f6cbc3f40262b58302b4f3 /machines/profpatsch
parentf7847aca46a00b428123f6593814b2d12bd0cb3e (diff)
machines/legosi: disable duplicity
Apparently one of its python dependencies went EOL and everything went
to fuck because python is a crapfest and nixpkgs policies around it
are stupid. yay.
Diffstat (limited to 'machines/profpatsch')
-rw-r--r--machines/profpatsch/legosi.nix77
1 files changed, 38 insertions, 39 deletions
diff --git a/machines/profpatsch/legosi.nix b/machines/profpatsch/legosi.nix
index 8f27d324..72709711 100644
--- a/machines/profpatsch/legosi.nix
+++ b/machines/profpatsch/legosi.nix
@@ -86,45 +86,44 @@ in {
       interfaceName = tailscaleInterface;
     };
 
-    services.duplicity = {
-      enable = true;
-      frequency = "daily";
-
-      root = "/";
-      # exclude all the system-related dirs
-      exclude = [
-        "/bin"
-        "/boot"
-        "/dev"
-        "/nix"
-        "/proc"
-        "/run"
-        "/sys"
-        "/tmp"
-        "/usr"
-        # /var/lib is what we want because it contains all services,
-        # but let’s be generous and keep everything in /var except log
-        "/var/log"
-      ];
-
-      targetUrl = "b2://000efe88f7148a00000000003@profpatsch-legosi/";
-
-      # this uses the internal stateDirectory of the duplicity module
-      # Has to be set manually once of course.
-      secretFile = "/var/lib/duplicity/secrets";
-
-      extraFlags = [
-        "--name" "legosi-root"
-        "--verbosity" "info"
-        "--full-if-older-than" "60D"
-        "--num-retries" "3"
-        # I hate GPG from the bottom of my heart
-        "--encrypt-key" gpgPublicKeyId
-        "--gpg-options" "--keyring ${gpgPublicKeyring} --trust-model always"
-      ];
-
-    };
-
+    # services.duplicity = {
+    #   enable = true;
+    #   frequency = "daily";
+
+    #   root = "/";
+    #   # exclude all the system-related dirs
+    #   exclude = [
+    #     "/bin"
+    #     "/boot"
+    #     "/dev"
+    #     "/nix"
+    #     "/proc"
+    #     "/run"
+    #     "/sys"
+    #     "/tmp"
+    #     "/usr"
+    #     # /var/lib is what we want because it contains all services,
+    #     # but let’s be generous and keep everything in /var except log
+    #     "/var/log"
+    #   ];
+
+    #   targetUrl = "b2://000efe88f7148a00000000003@profpatsch-legosi/";
+
+    #   # this uses the internal stateDirectory of the duplicity module
+    #   # Has to be set manually once of course.
+    #   secretFile = "/var/lib/duplicity/secrets";
+
+    #   extraFlags = [
+    #     "--name" "legosi-root"
+    #     "--verbosity" "info"
+    #     "--full-if-older-than" "60D"
+    #     "--num-retries" "3"
+    #     # I hate GPG from the bottom of my heart
+    #     "--encrypt-key" gpgPublicKeyId
+    #     "--gpg-options" "--keyring ${gpgPublicKeyring} --trust-model always"
+    #   ];
+
+    # };
 
     users.users = {
       root.openssh.authorizedKeys.keys = [ myKey ];