feat(restic): backup www.kmein.de state

configs/picom.nix

@@ -1,13 +1,13 @@
 {
   services.picom = {
     enable = true;
-    activeOpacity = 1;
+    # activeOpacity = 1;
     fade = true;
     fadeDelta = 1;
-    inactiveOpacity = 0.9;
-    shadow = true;
-    menuOpacity = 0.9;
-    shadowOpacity = 0.3;
+    # inactiveOpacity = 0.9;
+    # shadow = true;
+    # menuOpacity = 0.9;
+    # shadowOpacity = 0.3;
     fadeExclude = [
       "class_g = 'slock'" # don't want a transparent lock screen!
       "name *?= 'slock'"

flake.nix

@@ -204,7 +204,7 @@
               _module.args.nixinate = {
                 host = "manakish";
                 sshUser = "root";
-                buildOn = "remote";
+                buildOn = "local";
                 substituteOnTarget = true;
                 hermetic = false;
               };

secrets.txt

@@ -1,62 +1,63 @@
-secrets/di-fm-key.age
-secrets/email-password-meinhark.age
-secrets/kabsa-retiolum-privateKey-ed25519.age
-secrets/makanek-specus-privateKey.age
-secrets/manakish-retiolum-privateKey-rsa.age
-secrets/kfm-password.age
-secrets/email-password-fysi.age
-secrets/github-token-i3status-rust.age
-secrets/nextcloud-password-admin.age
-secrets/zaatar-retiolum-privateKey-ed25519.age
-secrets/manakish-syncthing-cert.age
-secrets/telegram-token-betacode.age
-secrets/tabula-retiolum-privateKey-rsa.age
-secrets/zaatar-ympd-basicAuth.age
-secrets/zaatar-moodle-dl-basicAuth.age
-secrets/mega-password.age
-secrets/telegram-token-reverse.age
-secrets/email-password-meinhaki.age
-secrets/spotify-password.age
-secrets/telegram-token-kmein.age
-secrets/maxmind-license-key.age
-secrets/makanek-retiolum-privateKey-rsa.age
-secrets/spotify-username.age
-secrets/onlyoffice-jwt-key.age
-secrets/miniflux-credentials.age
-secrets/email-password-fsklassp.age
-secrets/kabsa-retiolum-privateKey-rsa.age
-secrets/traadfri-key.age
-secrets/tahina-retiolum-privateKey-rsa.age
-secrets/makanek-retiolum-privateKey-ed25519.age
-secrets/zaatar-retiolum-privateKey-rsa.age
-secrets/kabsa-specus-privateKey.age
-secrets/nextcloud-password-kieran.age
-secrets/ful-root.age
-secrets/manakish-syncthing-key.age
-secrets/email-password-dslalewa.age
-secrets/zaatar-moodle-dl-tokens.json.age
-secrets/tabula-retiolum-privateKey-ed25519.age
-secrets/tahina-retiolum-privateKey-ed25519.age
-secrets/cifs-credentials-hu-berlin.age
-secrets/kabsa-syncthing-key.age
-secrets/ful-retiolum-privateKey-rsa.age
-secrets/ful-retiolum-privateKey-ed25519.age
-secrets/zaatar-syncthing-key.age
-secrets/openweathermap-api-key.age
 secrets/secrets.nix
 secrets/email-password-cock.age
 secrets/telegram-token-nachtischsatan.age
-secrets/kabsa-syncthing-cert.age
-secrets/grafana-password-admin.age
+secrets/nextcloud-password-kieran.age
+secrets/kabsa-retiolum-privateKey-rsa.age
+secrets/manakish-syncthing-key.age
+secrets/hetzner-storagebox-credentials.age
+secrets/ful-retiolum-privateKey-rsa.age
+secrets/kfm-password.age
+secrets/maxmind-license-key.age
+secrets/kabsa-specus-privateKey.age
+secrets/mega-password.age
+secrets/traadfri-key.age
+secrets/zaatar-syncthing-key.age
+secrets/onlyoffice-jwt-key.age
+secrets/nextcloud-password-fysi.age
+secrets/miniflux-credentials.age
+secrets/openweathermap-api-key.age
+secrets/zaatar-retiolum-privateKey-rsa.age
+secrets/email-password-fsklassp.age
+secrets/telegram-token-reverse.age
+secrets/email-password-fysi.age
+secrets/manakish-retiolum-privateKey-rsa.age
+secrets/nextcloud-password-admin.age
 secrets/email-password-posteo.age
-secrets/manakish-retiolum-privateKey-ed25519.age
-secrets/restic.age
+secrets/ful-root.age
+secrets/makanek-specus-privateKey.age
+secrets/zaatar-ympd-basicAuth.age
 secrets/home-assistant-token.age
-secrets/zaatar-syncthing-cert.age
+secrets/email-password-dslalewa.age
+secrets/telegram-token-kmein.age
+secrets/tahina-retiolum-privateKey-ed25519.age
+secrets/kabsa-syncthing-cert.age
+secrets/email-password-meinhark.age
+secrets/ful-retiolum-privateKey-ed25519.age
 secrets/nextcloud-password-database.age
 secrets/telegram-token-menstruation.age
-secrets/alertmanager-token-reporters.age
+secrets/tabula-retiolum-privateKey-rsa.age
+secrets/grafana-password-admin.age
+secrets/di-fm-key.age
+secrets/kabsa-retiolum-privateKey-ed25519.age
+secrets/email-password-meinhaki.age
 secrets/ful-specus-privateKey.age
-secrets/nextcloud-password-fysi.age
-secrets/weechat-sec.conf.age
+secrets/zaatar-syncthing-cert.age
+secrets/tahina-retiolum-privateKey-rsa.age
+secrets/spotify-password.age
+secrets/manakish-syncthing-cert.age
+secrets/makanek-retiolum-privateKey-rsa.age
+secrets/makanek-retiolum-privateKey-ed25519.age
+secrets/spotify-username.age
+secrets/telegram-token-betacode.age
+secrets/zaatar-moodle-dl-basicAuth.age
+secrets/zaatar-retiolum-privateKey-ed25519.age
+secrets/restic.age
+secrets/zaatar-moodle-dl-tokens.json.age
+secrets/cifs-credentials-hu-berlin.age
+secrets/alertmanager-token-reporters.age
+secrets/tabula-retiolum-privateKey-ed25519.age
 secrets/telegram-token-proverb.age
+secrets/github-token-i3status-rust.age
+secrets/weechat-sec.conf.age
+secrets/kabsa-syncthing-key.age
+secrets/manakish-retiolum-privateKey-ed25519.age

systems/makanek/configuration.nix

@@ -45,6 +45,7 @@ in {
       config.services.grafana.dataDir
       config.services.gitea.stateDir
       config.services.weechat.root
+      config.services.nginx.virtualHosts."www.kmein.de".root
       "/var/lib/weechat"
       "/var/lib/codimd"
     ];
@@ -114,6 +115,12 @@ in {
     defaults.email = kieran.email;
   };
 
+  services.nginx.virtualHosts."www.kmein.de" = {
+    addSSL = true;
+    enableACME = true;
+    root = "/var/www/kmein.de";
+  };
+
   environment.systemPackages = [
     pkgs.vim
     pkgs.git