feat(ops/restic): configure backups to Yandex Cloud

Backups are moving from GleSYS to Yandex Cloud (is this motivated by me not
having to pay for them in that case? Maybe!); this changes the default backup
location to accommodate that.

I also noticed that we previously manually placed the backup key on whitby, so
the new key is going into agenix instead, as well as the secrets for protecting
the repositories.

Change-Id: Ibe5dbfec6784345f020a8b4d92bb01c6ad719a89
Reviewed-on: https://cl.tvl.fyi/c/depot/+/13096
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>
This commit is contained in:
Vincent Ambo 2025-02-02 13:04:18 +03:00 committed by tazjin
parent 7851917ebf
commit 84bdb1e89a
6 changed files with 53 additions and 12 deletions

View file

@ -0,0 +1,17 @@
age-encryption.org/v1
-> ssh-ed25519 wI5oAA TDjaldqySaCEFAPuoUBVMR342403nhkawwtXbsJJenQ
eoeL2v5mCLksay/24miqYkWLJLLhrUIny4p1/e3/iTY
-> ssh-ed25519 dcsaLw /KSRH3XUGU7P+Ckpk86PFl8oRfPP/dlLb6zLUW04iH8
e2nXDvjkd5lzmXflhd820XmGvo/agSxDtfejxM45nhY
-> ssh-ed25519 zcCuhA pIxJxTWsOyH6Zqunv427jdy1G7BV7Dpjpp2l+HEe/3s
rxyoDZTQmsGwNB0nCTXNHhc7VCsb11/ynManfsbf5Ss
-> ssh-ed25519 1SxhRA K8DkqAk5gPfsjTQiTjLGRNR+63uG9ogacsrH69/afGs
LAt97AuWaPEYG7IlFiIOll9s02cQ+qhrpr0GVXX+e/o
-> ssh-ed25519 ch/9tw 6eG9psphjjfW6TRTYxqozX9WLhQgC9u2ngR35rpXiH4
9dFgdqSDKRXAotKKR19l9gqWlTNxuv9r/IcaMZeO9Oc
-> ssh-ed25519 CpJBgQ /t2M57kxjKDq/UMoh9UnmQvlETqiwqClt0Lg6quqKRk
oDblqLXxyJ7gTtZzhbStHep62oZK0iXikJ6fi6EW0gM
-> ssh-ed25519 aXKGcg DVn6XZGaBHAeL4pGMaolO8cSOIKRIhmuDycV65pfxhs
M6XVDk1Z9BdCoCvK30NDJsKKnURk/XUcRP4t5pZ7JFk
--- H3D9jfLkrsDOgWfNhUJHZcVGa9dPqr4EuuBU40iJbJs
{:jІ ¿÷pVF´x'`è×5Lz# yµìÈìÀ¿|"²öÕòû/>èô"QX¹ ÓÅJe<4A>þ W*œ‚¸?ðñ