flake.nix

@@ -36,6 +36,7 @@
               agenix.nixosModules.default
               ./system/strawberry/core.nix
               ./shared/core
+              ./shared/secrets.nix
             ];
             specialArgs = args;
           };

secret/backblaze.age

@@ -1,10 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 WzdOcw /csNPlpruF3Qq1YHu2sf9AUZVrECvlo9kQ+d/U7SsDY
-grIBod4k2TvmiYh5rhh/mWfg37ezuRYz5sgw8jI3sVw
--> ssh-ed25519 tvCYbQ NNrvjiXnK+QnKcyXyGEQdGkGYOHma9IXS+xXt5kKlkY
-YRoXtSrYy+6c92J8+A3i1R6WZWAApsBDdg4lnZzV534
--> j58*}-grease -LZ i
-Rvy8Armemfb+G1DyL1JbbvQsfRbVeWgte507ozmnUjL3q+tUspegA5XxOA15XwVM
-wHCjU9FYC+WgL8a2m65vDs4
---- Mwn5PvXnc54IJ1JGFAZ3E4oErHBfPZImj58twTviCVo
-¬”¼‚<ï[>"àÖPȨ݄öÎbš/<2F>Û\o)7öª§t®ÞS{¶Úü@pøQ:›áÒŠ¡Ü•K‹YÂ>kØÆKé3tÔê’¡ÉÇ=wƒR‹åùžAjô‚™Ðô¸
4;Bè ˜1¼ïz¤>XȪPÄÝîóxó<78>Í'åÜ]¹8†mÂò¬¹Ö¶\‡œ¨õxâÄJ/Á²ôNJŽø›N2äÛ
+-> ssh-ed25519 WzdOcw +G45tWielvhzLS+4KWh9vKo7nUlXZU5pC9XUHJ+lITg
+iyznrg1UPA0DAkRPyjfYretMIeF32O+ej4QARUIDXPM
+-> ssh-ed25519 qlXMTg GVBSMuYGSZDZUYvBd+jRQr5QgcFKjXKPNIr7PQYFfm8
+dqQB4AEhU5PFNeyI3dBnIAoRo1X7vypNz0pCd9hb6Vc
+-> ssh-ed25519 tvCYbQ HqrKfYn9NHjv+X996pU8kCJl17juaZBrD1hPWJacGVU
+3lFVji0VCQciHewFQJ9yEj+anhVdQ13gif0s7Pyu1L8
+-> KgQ[5-grease " xDo<4{l: xJ y+$GwT+
+VtYV6LGrhE52cf/+baTLxlGlHXEKqjVy0A
+--- Qhc+wm4WQIL2elyAiv/M14r6pyvuFSbwRzBV9hQjT94
+‚µ‚Ù¬áY¯•ç’h¸†ÑnÚ<6E>¢oì¹[D[iTÊ6¸H@˜Ðjð4v‚ü	4øÔËœ+RñÄ2fìO“Œx6Ã;Sô> Äw%îy˼[$-
¹ôj"Ah¡2¨Q<C2A8>
+~ªQMµ;]<5D>E®ú6‹mN°…Kz*òÄ
+ùc;÷ÿrùD®GBÛ=+kÉÙIî.ÄHâ+ë«O"‚”~4ÙÄK’

secrets.nix

@@ -1,9 +1,11 @@
-let strawberry = builtins.readFile ./system/strawberry/keys/riley.pub;
-    dev-lt-63  = builtins.readFile ./system/dev-lt-63/keys/riley.pub;
+let strawberry = [
+      (builtins.readFile ./system/strawberry/keys/riley.pub)
+      (builtins.readFile ./system/strawberry/keys/root.pub)
+    ];
+    dev-lt-63 = [
+      (builtins.readFile ./system/dev-lt-63/keys/riley.pub)
+    ];
 in {
   # Secrets for backup cloud storage provider
-  "secret/backblaze.age".publicKeys = [
-    strawberry
-    dev-lt-63
-  ];
+  "secret/backblaze.age".publicKeys = strawberry ++ dev-lt-63;
 }

shared/core/default.nix

@@ -3,6 +3,7 @@
 {
 
   imports = [
+    ./backups.nix
     ./gui.nix
     ./nix.nix
     ./ssh.nix

system/strawberry/core.nix

@@ -2,6 +2,7 @@
 
   custom = {
     gui.enable = true;
+    backups.enable = true;
   };
 
   system.stateVersion = "21.11";

system/strawberry/keys/root.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILniE+LdfdV9V9+Zj5gJXqKEv1CzQaEySy1u5OdbKa8d root@strawberry