From dd9035f62170f3b024891583f17fe5de81c22d69 Mon Sep 17 00:00:00 2001 From: Filippo Berto Date: Mon, 13 Oct 2025 13:53:36 +0200 Subject: [PATCH] update: deploy garage to baldur --- flake.nix | 1 + nixos/garage.nix | 12 ++++----- secrets/garage_rpc_secret.age | 47 +++++++++++++---------------------- 3 files changed, 24 insertions(+), 36 deletions(-) diff --git a/flake.nix b/flake.nix index e7a620b..fb3abb0 100644 --- a/flake.nix +++ b/flake.nix @@ -356,6 +356,7 @@ ./instances/baldur/configuration.nix ./nixos/ip_forwarding.nix + ./nixos/garage.nix self.nixosModules.tiziano { diff --git a/nixos/garage.nix b/nixos/garage.nix index d4f58d6..c34008a 100644 --- a/nixos/garage.nix +++ b/nixos/garage.nix @@ -11,17 +11,17 @@ 3901 ]; - # Not correctly passing mount bindings - systemd.services.garage.serviceConfig = { - ProtectHome = lib.mkForce false; - DynamicUser = false; - }; + # # Not correctly passing mount bindings + # systemd.services.garage.serviceConfig = { + # ProtectHome = lib.mkForce false; + # DynamicUser = false; + # }; services.garage = { enable = true; package = pkgs.garage_2; settings = { - data_dir = "/mnt/raid/garage/"; + # data_dir = "/mnt/raid/garage/"; replication_factor = 1; rpc_secret_file = config.age.secrets.garage_rpc_secret.path; rpc_bind_addr = "0.0.0.0:3901"; diff --git a/secrets/garage_rpc_secret.age b/secrets/garage_rpc_secret.age index 83f8804..6796335 100644 --- a/secrets/garage_rpc_secret.age +++ b/secrets/garage_rpc_secret.age @@ -1,32 +1,19 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHF5NzlGUSBCclZF -citBSFJjb1FTMVdIT0VnTlo0ZnBEYS9kRWNlNUZJU014VEFqeEVJCklEU0R1WWFK -ZlRrVkJ0cEJHRFg5WGF1UlpuaGd0ZGdBMjR5UDRKWkxqckkKLT4gc3NoLWVkMjU1 -MTkgNGJlaEZBIEFkOGNiOXd3OW16bFlHeXpGWnlCbWwxUkZVWGdsbUthYzJXaG5K -QnliVmMKUDdsQUhyakZ6ak9uRkdYbDVHcUJtM1Zhd21QRStzY2lrTVhNdEUxK1VX -YwotPiBzc2gtZWQyNTUxOSBoR1FBU0EgQXhuYmpWZVYyMmo4bTBSYjNKMWFKUjh4 -Y0RKRlIwL3NZdTJ6QmpkVGRrNApPM0ZVeWlrQUtiMTRaL1dQMm1DSmMwdHhBMWhI -a0J3V3ZxTHFtMTlGMzVJCi0+IHNzaC1lZDI1NTE5IFhTbm9lUSBreWx3cHhWcWNL -aEh3c1VPeFBSS1RCK2RMVE5MYUpIQWJJQjRkSG1WeVNnCnltdjV2Y2dCZmhLNVNV -WE1tNUFNcThWdWFheEtHa0FMVVl1amlRb09nWHcKLT4gc3NoLWVkMjU1MTkgbDc5 -NUNBIDhGK0VHNkdBaWZGY3ZOc1E3VDg3ZHV4MzRhUDJzbC9aSnc1d1VnRm9HVjgK -Mm5HamJLa3hXaDZ1WmxDWWdQY3d0TlBKdTZrb3pRb3R0d1VncGYvZEF0TQotPiBz -c2gtZWQyNTUxOSBxaFJPYXcgVnhHMzVSWTdpblZENnhaeHJEcC82aXZUUUVHL2xW -T3hjUFFJTDhqZzJTSQpDTlh0WVVBSEYxSTlQSWNDOXZFTkRxT0JveU96MnFHZUQw -WThxbUdIRFlVCi0+IHNzaC1lZDI1NTE5IHlpWW9YZyB0SFY3YVhicFcrQllnMS96 -a0h1SGdROW1sUGhBL0R2Q3pvbkxRVkg3Q2kwCk1HdUFDby9qZjdaWmtDcitxWmRh -Rk9mMkxnNmlseVdrRVExMGFjWTBGNkUKLT4gc3NoLWVkMjU1MTkgWGdDM1hBIG9t -emNjdDF1TE1TeTVJdUEwZ0lkVDdnVmRqcU10MHptWDNQVzZORXlIWEEKbTdzcCt1 -aFYxeU1XR1Q3ai9qZnpzOTNYVGt6eUY4VzNzUnJ6VnVpK2Z2dwotPiBzc2gtZWQy -NTUxOSBJdnlZdWcgWnY1b3VPRHY4N2N1NTBsTk43d1B0aEdQWTcrWHJXTUVvY1kv -eE1RZzlqdwpWeVh2S2hoVGFqZHlGaEFuZkJZMVB4b2FCT2tvT2NPdVBid2JLUDlI -S3dJCi0+IHNzaC1lZDI1NTE5IHY3Ty9GQSBGMEtzMVNWMUZKUmlGbHlUT3lpTzQ1 -R1FmYS9XVHlRN2UrcnA4dnlma1VrClpQQk8ydEVFbW8vQXhvd1pIT1daZVdDNHA1 -UmtwZEZhaVo5K1FmQ0ZpZUkKLT4gRn1aYWhkdTwtZ3JlYXNlIDZwY2VfIF5WMSQu -Cnp1aTBBSmN3ZmhSNnEycE5TdXozYUo0aHNMWGZ4NUhIUGc2RmIzN2dCM3ZNRG9Y -WDBseXJzTlZKNUVwRTA0V0gKNTltdWFwc2JjL0V2cUd0c2VpMVhGZytWL25Uc3RD -VlcKLS0tIDQ0OWNKREErNTVEUGh2MGNYV0x0c0hjbERiRWExK3RHQVRRWTdzM1dj -YTAKBFlQKZLPbFiJPOrjNljFp/o7rIBwiL2bDDXfkwkHyeMq5D5m7xL62j85LCPz -CR802LaoPNLLjUU+5fCe5KwbPOtM8K5aPjrzW+Z48SVBrrpf7+CGCc2XhxjSshN5 -RjyX +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDRiZWhGQSBmc1lH +ejBHMlUzQ1ZSbUpSaW5MaXhQQjhPSHNTNW1NNDRlYmI5dnhoM1F3CjhzT0EvWlkx +eDEzZkVJZkhabFcrQ2EvU1Zza1BmbjQ3Nlo2UUtJR3VrNjAKLT4gc3NoLWVkMjU1 +MTkgZXZMbEl3IDNPK1RVcTZMalBEVkFWYXljbjNHSWYyaGgySmNzSUZ5VmV2NHFm +MUZPQUUKUVdQdFRzZHlZUWxWMWJla3NKNG5PMVVOUGNHY0lOY0hja2QzUHAyVE84 +OAotPiBzc2gtZWQyNTUxOSBYU25vZVEgQmpNOGxldTYzeGo4c090SkxtRjBlOVRJ +aGs1WFJjcDBCOW1nemlObi9qWQprVEU5MnpQcFhvZDNpQUxrcVBNL3pSTWovbEF1 +MjU5MW1XZ2F5Wk56OTdBCi0+IHNzaC1lZDI1NTE5IHlpWW9YZyBzZEpmaVV4U21Q +bEpzcnFKcGNoMDhnU2l4S3E1aXBiR0M1cHJqQXlUZFJZCk44WkEybTJDRHRLWlcr +NVI3ZDB5b1hiLytVRW5OMWlWSEh0WUpuSXpZU1kKLT4gc3NoLWVkMjU1MTkgSXZ5 +WXVnIHl0WTRmWG5uZmRsSGgrZ1JsWmpxeVpWZE5qbWgzZDZieWltWUNhOEw0RGMK +MUs1MWJxcWZjNnJrT1R0Zk8vUjZoNE50ZWJVQkVUQ2N2em5aOXBybHZPawotPiAx +Si1ncmVhc2UgYS9FCjlHcE42MUtWMjYveldJWUtuS0Z6VGx3QlhWUTROZi9mZkhV +eitySGVHRmJ3cU41bXlVMkJndFQrZ1E2ZXFnCi0tLSA3b0t5ZTZwVC9LMjl4N2hC +bVdEU0l2dDM5Q0pHTlRTQ2YzcWtMeUFlSzlZCnRFwYBnE+wnwAVeabj4tamZ1/Kn +am8GfO7SA07gF4zL1g8OWvevCohed5DVC8eD5Hzo+ILNsMI4DaeUkB5hn+AvxUNt +hdv3DMx+ff4VOqyUOSLdkzuQeawlP0qgZmHcLdM= -----END AGE ENCRYPTED FILE-----