nixcfg/cluster/prod/app/backup/secrets.toml

93 lines
2.2 KiB
TOML
Raw Permalink Normal View History

# Cryptpad backup
[secrets."backup/cryptpad/backup_restic_password"]
type = 'user'
description = 'Restic password to encrypt backups'
[secrets."backup/cryptpad/backup_aws_secret_access_key"]
type = 'user'
description = 'Backup AWS secret access key'
[secrets."backup/cryptpad/backup_restic_repository"]
type = 'user'
description = 'Restic repository'
example = 's3:https://s3.garage.tld'
[secrets."backup/cryptpad/backup_aws_access_key_id"]
type = 'user'
description = 'Backup AWS access key ID'
# Consul backup
[secrets."backup/consul/backup_restic_password"]
type = 'user'
description = 'Restic password to encrypt backups'
[secrets."backup/consul/backup_aws_secret_access_key"]
type = 'user'
description = 'Backup AWS secret access key'
[secrets."backup/consul/backup_restic_repository"]
type = 'user'
description = 'Restic repository'
example = 's3:https://s3.garage.tld'
[secrets."backup/consul/backup_aws_access_key_id"]
type = 'user'
description = 'Backup AWS access key ID'
# Postgresql backup
2022-12-25 21:45:05 +00:00
[secrets."postgres/backup/aws_access_key_id"]
type = 'user'
description = 'Minio access key'
2022-12-25 21:45:05 +00:00
[secrets."postgres/backup/aws_secret_access_key"]
type = 'user'
2022-12-25 21:45:05 +00:00
description = 'Minio secret key'
2022-12-25 21:45:05 +00:00
[secrets."postgres/backup/crypt_public_key"]
type = 'user'
2022-12-25 21:45:05 +00:00
description = 'A public key to encypt backups with age'
2022-12-25 21:45:05 +00:00
# Plume backup
2022-12-25 21:45:05 +00:00
[secrets."plume/backup_restic_repository"]
type = 'user'
2022-12-25 21:45:05 +00:00
description = 'Restic repository'
example = 's3:https://s3.garage.tld'
2022-12-25 21:45:05 +00:00
[secrets."plume/backup_restic_password"]
type = 'user'
2022-12-25 21:45:05 +00:00
description = 'Restic password to encrypt backups'
2022-12-25 21:45:05 +00:00
[secrets."plume/backup_aws_secret_access_key"]
type = 'user'
2022-12-25 21:45:05 +00:00
description = 'Backup AWS secret access key'
2022-12-25 21:45:05 +00:00
[secrets."plume/backup_aws_access_key_id"]
type = 'user'
2022-12-25 21:45:05 +00:00
description = 'Backup AWS access key ID'
2022-12-25 21:45:05 +00:00
# Dovecot backup
[secrets."email/dovecot/backup_restic_password"]
type = 'user'
2022-12-25 21:45:05 +00:00
description = 'Restic backup password to encrypt data'
2022-12-25 21:45:05 +00:00
[secrets."email/dovecot/backup_aws_secret_access_key"]
type = 'user'
2022-12-25 21:45:05 +00:00
description = 'AWS Secret Access key'
2022-12-25 21:45:05 +00:00
[secrets."email/dovecot/backup_restic_repository"]
type = 'user'
2022-12-25 21:45:05 +00:00
description = 'Restic Repository URL, check op_guide/backup-minio to see the format'
2022-12-25 21:45:05 +00:00
[secrets."email/dovecot/backup_aws_access_key_id"]
type = 'user'
description = 'AWS Acces Key ID'