update: deploy garage to baldur

flake.nix

@@ -356,6 +356,7 @@
               ./instances/baldur/configuration.nix
 
               ./nixos/ip_forwarding.nix
+              ./nixos/garage.nix
 
               self.nixosModules.tiziano
               {

nixos/garage.nix

@@ -11,17 +11,17 @@
     3901
   ];
 
-  # Not correctly passing mount bindings
-  systemd.services.garage.serviceConfig = {
-    ProtectHome = lib.mkForce false;
-    DynamicUser = false;
-  };
+  # # Not correctly passing mount bindings
+  # systemd.services.garage.serviceConfig = {
+  #   ProtectHome = lib.mkForce false;
+  #   DynamicUser = false;
+  # };
 
   services.garage = {
     enable = true;
     package = pkgs.garage_2;
     settings = {
-      data_dir = "/mnt/raid/garage/";
+      # data_dir = "/mnt/raid/garage/";
       replication_factor = 1;
       rpc_secret_file = config.age.secrets.garage_rpc_secret.path;
       rpc_bind_addr = "0.0.0.0:3901";

secrets/garage_rpc_secret.age

@@ -1,32 +1,19 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHF5NzlGUSBCclZF
-citBSFJjb1FTMVdIT0VnTlo0ZnBEYS9kRWNlNUZJU014VEFqeEVJCklEU0R1WWFK
-ZlRrVkJ0cEJHRFg5WGF1UlpuaGd0ZGdBMjR5UDRKWkxqckkKLT4gc3NoLWVkMjU1
-MTkgNGJlaEZBIEFkOGNiOXd3OW16bFlHeXpGWnlCbWwxUkZVWGdsbUthYzJXaG5K
-QnliVmMKUDdsQUhyakZ6ak9uRkdYbDVHcUJtM1Zhd21QRStzY2lrTVhNdEUxK1VX
-YwotPiBzc2gtZWQyNTUxOSBoR1FBU0EgQXhuYmpWZVYyMmo4bTBSYjNKMWFKUjh4
-Y0RKRlIwL3NZdTJ6QmpkVGRrNApPM0ZVeWlrQUtiMTRaL1dQMm1DSmMwdHhBMWhI
-a0J3V3ZxTHFtMTlGMzVJCi0+IHNzaC1lZDI1NTE5IFhTbm9lUSBreWx3cHhWcWNL
-aEh3c1VPeFBSS1RCK2RMVE5MYUpIQWJJQjRkSG1WeVNnCnltdjV2Y2dCZmhLNVNV
-WE1tNUFNcThWdWFheEtHa0FMVVl1amlRb09nWHcKLT4gc3NoLWVkMjU1MTkgbDc5
-NUNBIDhGK0VHNkdBaWZGY3ZOc1E3VDg3ZHV4MzRhUDJzbC9aSnc1d1VnRm9HVjgK
-Mm5HamJLa3hXaDZ1WmxDWWdQY3d0TlBKdTZrb3pRb3R0d1VncGYvZEF0TQotPiBz
-c2gtZWQyNTUxOSBxaFJPYXcgVnhHMzVSWTdpblZENnhaeHJEcC82aXZUUUVHL2xW
-T3hjUFFJTDhqZzJTSQpDTlh0WVVBSEYxSTlQSWNDOXZFTkRxT0JveU96MnFHZUQw
-WThxbUdIRFlVCi0+IHNzaC1lZDI1NTE5IHlpWW9YZyB0SFY3YVhicFcrQllnMS96
-a0h1SGdROW1sUGhBL0R2Q3pvbkxRVkg3Q2kwCk1HdUFDby9qZjdaWmtDcitxWmRh
-Rk9mMkxnNmlseVdrRVExMGFjWTBGNkUKLT4gc3NoLWVkMjU1MTkgWGdDM1hBIG9t
-emNjdDF1TE1TeTVJdUEwZ0lkVDdnVmRqcU10MHptWDNQVzZORXlIWEEKbTdzcCt1
-aFYxeU1XR1Q3ai9qZnpzOTNYVGt6eUY4VzNzUnJ6VnVpK2Z2dwotPiBzc2gtZWQy
-NTUxOSBJdnlZdWcgWnY1b3VPRHY4N2N1NTBsTk43d1B0aEdQWTcrWHJXTUVvY1kv
-eE1RZzlqdwpWeVh2S2hoVGFqZHlGaEFuZkJZMVB4b2FCT2tvT2NPdVBid2JLUDlI
-S3dJCi0+IHNzaC1lZDI1NTE5IHY3Ty9GQSBGMEtzMVNWMUZKUmlGbHlUT3lpTzQ1
-R1FmYS9XVHlRN2UrcnA4dnlma1VrClpQQk8ydEVFbW8vQXhvd1pIT1daZVdDNHA1
-UmtwZEZhaVo5K1FmQ0ZpZUkKLT4gRn1aYWhkdTwtZ3JlYXNlIDZwY2VfIF5WMSQu
-Cnp1aTBBSmN3ZmhSNnEycE5TdXozYUo0aHNMWGZ4NUhIUGc2RmIzN2dCM3ZNRG9Y
-WDBseXJzTlZKNUVwRTA0V0gKNTltdWFwc2JjL0V2cUd0c2VpMVhGZytWL25Uc3RD
-VlcKLS0tIDQ0OWNKREErNTVEUGh2MGNYV0x0c0hjbERiRWExK3RHQVRRWTdzM1dj
-YTAKBFlQKZLPbFiJPOrjNljFp/o7rIBwiL2bDDXfkwkHyeMq5D5m7xL62j85LCPz
-CR802LaoPNLLjUU+5fCe5KwbPOtM8K5aPjrzW+Z48SVBrrpf7+CGCc2XhxjSshN5
-RjyX
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDRiZWhGQSBmc1lH
+ejBHMlUzQ1ZSbUpSaW5MaXhQQjhPSHNTNW1NNDRlYmI5dnhoM1F3CjhzT0EvWlkx
+eDEzZkVJZkhabFcrQ2EvU1Zza1BmbjQ3Nlo2UUtJR3VrNjAKLT4gc3NoLWVkMjU1
+MTkgZXZMbEl3IDNPK1RVcTZMalBEVkFWYXljbjNHSWYyaGgySmNzSUZ5VmV2NHFm
+MUZPQUUKUVdQdFRzZHlZUWxWMWJla3NKNG5PMVVOUGNHY0lOY0hja2QzUHAyVE84
+OAotPiBzc2gtZWQyNTUxOSBYU25vZVEgQmpNOGxldTYzeGo4c090SkxtRjBlOVRJ
+aGs1WFJjcDBCOW1nemlObi9qWQprVEU5MnpQcFhvZDNpQUxrcVBNL3pSTWovbEF1
+MjU5MW1XZ2F5Wk56OTdBCi0+IHNzaC1lZDI1NTE5IHlpWW9YZyBzZEpmaVV4U21Q
+bEpzcnFKcGNoMDhnU2l4S3E1aXBiR0M1cHJqQXlUZFJZCk44WkEybTJDRHRLWlcr
+NVI3ZDB5b1hiLytVRW5OMWlWSEh0WUpuSXpZU1kKLT4gc3NoLWVkMjU1MTkgSXZ5
+WXVnIHl0WTRmWG5uZmRsSGgrZ1JsWmpxeVpWZE5qbWgzZDZieWltWUNhOEw0RGMK
+MUs1MWJxcWZjNnJrT1R0Zk8vUjZoNE50ZWJVQkVUQ2N2em5aOXBybHZPawotPiAx
+Si1ncmVhc2UgYS9FCjlHcE42MUtWMjYveldJWUtuS0Z6VGx3QlhWUTROZi9mZkhV
+eitySGVHRmJ3cU41bXlVMkJndFQrZ1E2ZXFnCi0tLSA3b0t5ZTZwVC9LMjl4N2hC
+bVdEU0l2dDM5Q0pHTlRTQ2YzcWtMeUFlSzlZCnRFwYBnE+wnwAVeabj4tamZ1/Kn
+am8GfO7SA07gF4zL1g8OWvevCohed5DVC8eD5Hzo+ILNsMI4DaeUkB5hn+AvxUNt
+hdv3DMx+ff4VOqyUOSLdkzuQeawlP0qgZmHcLdM=
 -----END AGE ENCRYPTED FILE-----