restic: add pepe as backup target

configs/mobi/restic.nix

@@ -1,5 +1,6 @@
 {
   backup.services.restic = {
+    "on-pepe.insecure".enable = false;
     "on-porani.insecure".enable = false;
     "on-workhorse.private".enable = false;
     "on-workout.private".enable = false;

configs/sputnik/configuration.nix

@@ -6,6 +6,7 @@
 
     ./nginx.nix
     ./tinc.nix
+    ./restic.nix
     #./syncplay.nix
 
     #./mail-server.nix

configs/sputnik/restic.nix

@@ -0,0 +1,8 @@
+{
+  backup.services.restic = {
+    "on-pepe.private".enable = false;
+    "on-porani.insecure".enable = false;
+    "on-workhorse.private".enable = false;
+    "on-workout.private".enable = false;
+  };
+}

configs/workhorse/configuration.nix

@@ -16,7 +16,6 @@
     ./mail-fetcher.nix
     ./packages.nix
     ./prometheus.nix
-    ./restic.nix
     ./syncthing.nix
     ./taskserver.nix
     ./tinc.nix

configs/workhorse/restic.nix

@@ -1,8 +0,0 @@
-{ config, ... }: {
-
-  backup.services.restic = {
-    "on-porani.insecure".enable = true;
-    "on-workhorse.private".enable = true;
-  };
-
-}

system/all/restic.nix

@@ -8,10 +8,16 @@
   };
 
   config = let
-    servers = [ "porani.insecure" "workhorse.private" "workout.private" ];
+    servers = [
+      "porani.insecure"
+      "workhorse.private"
+      "workout.private"
+      "pepe.private"
+    ];
     dirs = config.backup.all.restic.dirs;
 
     setup = server: {
+      enable = lib.mkDefault true;
       passwordFile = toString <secrets/backup/restic-repo>;
       repo = "sftp::backup/remote-${config.networking.hostName}";
       requires = [ ];

system/desktop/restic.nix

@@ -1,10 +1,6 @@
 { lib, ... }: {
 
-  backup.services.restic = {
+  backup.services.restic = { "on-porani.insecure".enable = false; };
-    "on-porani.insecure".enable = lib.mkDefault true;
-    "on-workhorse.private".enable = lib.mkDefault true;
-    "on-workout.private".enable = lib.mkDefault true;
-  };
 
   backup.all.restic.dirs = [ "/home/palo/.password-store" ];
 

system/server/default.nix

@@ -6,7 +6,6 @@
     ./initssh.nix
     ./graylog-exporter.nix
     ./prometheus-exporters.nix
-    ./restic.nix
   ];
 
   # make sure laptops stay awake when closing the montior

system/server/restic.nix

@@ -1,9 +0,0 @@
-{ lib, ... }: {
-
-  backup.services.restic = {
-    "on-porani.insecure".enable = lib.mkDefault true;
-    "on-workhorse.private".enable = lib.mkDefault true;
-    "on-workout.private".enable = lib.mkDefault true;
-  };
-
-}