kestrel borg backup setup

home/dot_config/borgmatic.d/kestrel_common.yaml

@@ -0,0 +1,15 @@
+source_directories:
+    - "/home/tstarr"
+
+exclude_patterns:
+    - "/home/tstarr/.?*"
+    - "/home/tstarr/mnt"
+    - "/home/tstarr/tmp"
+    - "/home/tstarr/sync"
+    - "/home/tstarr/media/roms"
+    - "/home/tstarr/box"
+    - "/home/tstarr/Downloads"
+
+archive_name_format: 'kestrel.borg-{now}'
+
+<<: !include common.yaml

home/dot_config/borgmatic.d/kestrel_rsync.yaml

@@ -0,0 +1,7 @@
+repositories:
+  - path: ssh://fm2120@fm2120.rsync.net//data2/home/fm2120/store/kestrel.borg
+    label: rsync
+
+remote_path: borg1
+
+<<: !include kestrel_common.yaml

home/dot_config/borgmatic.d/kestrel_torus.yaml

@@ -0,0 +1,5 @@
+repositories:
+  - path: ssh://tstarr@torus//engi/store/kestrel.borg
+    label: torus
+
+<<: !include kestrel_common.yaml

provision/hosts/kestrel/backup.nix

@@ -25,6 +25,11 @@
     owner = "${user}";
     group = "users";
   };
+  age.secrets."borg/torus/password" = {
+    file = ../../secrets/borg/torus/password.age;
+    owner = "${user}";
+    group = "users";
+  };
 
   # Password-less logins for backup
   users.users."${user}".openssh.authorizedKeys.keyFiles = [