separate backups

zowoq · zowoq · commit f0ca1a385a13 · 2026-02-22T09:57:09.000+10:00
diff --git a/.sops.yaml b/.sops.yaml
@@ -73,7 +73,6 @@ creation_rules:
     path_regex: ^hosts/web01/secrets.yaml$
   - key_groups:
       - age:
-          - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMm3/o1HguyRL1z/nZxLBY9j/YUNXeNuDoiBLZAyt88Z
           - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFiozp1A1+SUfJQPa5DZUQcVc6CZK2ZxL6FJtNdh+2TP
           - age1dzvjjum2p240qtdt2qcxpm7pl2s5w36mh4fs3q9dhhq0uezvdqaq9vrgfy
           - age17n64ahe3wesh8l8lj0zylf4nljdmqn28hvqns2g7hgm9mdkhlsvsjuvkxz
diff --git a/hosts/build02/nixpkgs-update-backup.nix b/hosts/build02/nixpkgs-update-backup.nix
@@ -1,17 +1,42 @@
-{ config, inputs, ... }:
+{ config, ... }:
 {
   # 100GB storagebox is attached to the build02 server
 
-  imports = [
-    inputs.self.nixosModules.backup
-  ];
+  sops.secrets.build02-borgbackup-ssh = { };
 
-  nixCommunity.backup = [
-    {
-      name = "nixpkgs-update";
-      after = [ config.systemd.services.nixpkgs-update-delete-old-logs.name ];
-      paths = [ "/var/log/nixpkgs-update" ];
-      startAt = "hourly";
-    }
-  ];
+  programs.ssh.knownHosts.build02-hetzner-storage-box = {
+    hostNames = [ "[u416406.your-storagebox.de]:23" ];
+    publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIICf9svRenC/PLKIL9nk6K/pxQgoiFC41wTNvoIncOxs";
+  };
+
+  services.borgbackup.jobs.nixpkgs-update = {
+    paths = [ "/var/log/nixpkgs-update" ];
+    repo = "u416406@u416406.your-storagebox.de:/./build02-nixpkgs-update";
+    encryption.mode = "none";
+    compression = "auto,zstd";
+    startAt = "hourly";
+    environment.BORG_RSH = "ssh -oPort=23 -i ${config.sops.secrets.build02-borgbackup-ssh.path}";
+    preHook = ''
+      set -x
+    '';
+
+    postHook = ''
+      cat > /var/log/telegraf/borgbackup-job-nixpkgs-update.service <<EOF
+      task,frequency=hourly last_run=$(date +%s)i,state="$([[ $exitStatus == 0 ]] && echo ok || echo fail)"
+      EOF
+    '';
+
+    prune.keep = {
+      within = "1d"; # Keep all archives from the last day
+      daily = 7;
+      weekly = 4;
+      monthly = 0;
+    };
+  };
+
+  systemd.services.borgbackup-job-nixpkgs-update = {
+    after = [ config.systemd.services.nixpkgs-update-delete-old-logs.name ];
+    serviceConfig.ReadWritePaths = [ "/var/log/telegraf" ];
+    serviceConfig.Restart = "on-failure";
+  };
 }
diff --git a/hosts/build02/secrets.yaml b/hosts/build02/secrets.yaml
@@ -2,6 +2,7 @@ github-r-ryantm-key: ENC[AES256_GCM,data:Z6kGGGGLClFWxBu4RpPw3F/QrkLVIgkvLzi5ALU
 github-r-ryantm-token: ENC[AES256_GCM,data:X77cQQQDFcUe9VcHZwbhZdyg6wFsAEwRMDaDojWYyHJf4RxWwRm8Vg==,iv:/PxtdHM1eTbRZb0KrjuSSutxBVwmFaSejp62qb+/D10=,tag:K/EH8Rl6CeZcigftKO3hNw==,type:str]
 github-token-with-username: ENC[AES256_GCM,data:H1ek0++8fx4fIcxLZMe/fphuHmR3FHDGT0W+IJ4LXme0dgoD+S/uW+oLL7LEpb2lkMv5ZxGu,iv:TmWriUuA2l6L4tzMfisvtBRd5JsFgIAsSbNN7C/MExI=,tag:90L26NPokbG/xxQ37xf6Bg==,type:str]
 harmonia-key: ENC[AES256_GCM,data:spF0umMitWXKQGo5YhiF34LiYFdnYN0a3DZSwDT/lD+4CK2K/hHk1FvXsw973sLQzkZmqpU4UfgTpAY4uiIsr38LZbxdYRt+pFPzTuphfCudUD4dIaKhl/T7F+s3QjPTdcoWyIPQBKoX6JAFNpC4nIfHvdHCdZZLU/BJT+3YdLsE0w==,iv:+pUDHANiEj+zUOn8kzaFwxV2YW5EYP+OyaeIDsYClqU=,tag:y4ZiPrPztRq+4zlSexxF9Q==,type:str]
+build02-borgbackup-ssh: ENC[AES256_GCM,data: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,iv:cilEz7KVYT6BGY7DdeP7woURZnrMRpgDVwbwIBJE4xc=,tag:BDlk2w6U0dcHIGxN5C28AQ==,type:str]
 sops:
     age:
         - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMm3/o1HguyRL1z/nZxLBY9j/YUNXeNuDoiBLZAyt88Z
@@ -59,7 +60,7 @@ sops:
             TWc5aUZSUGhKd0MyQUZJamQ5dHNySUUK7zHLsR9NcPdt1hhKtXnnQfCoK4rcKiij
             wXx2L3zhsYYhe5BYIXLJPONZZd5wEXooLzT4ZAYRKjWxnpbiQ2jaFA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-18T09:52:39Z"
-    mac: ENC[AES256_GCM,data:JjvII6cDN9WkHXbFPP2Ol9cwEMRo1XW8BKpqhlbACRo4BnkPXq5l8MJMdKV/7fMON/Ncp+HSMvlJgNKv5PF2tbvQlmkI7XQCJKXZyqkcHQg+6IPcaYGtT0PJgACcKUA2lm4gERskj/O/V6W64ottdzDHS6vGk7mzR254A5GTox0=,iv:ftsNlCw3VDGBF4svqqfcG3/GIz+rznPzF3SIi+rs/YI=,tag:Zb+HoY/7VPXd9JUZco1v1w==,type:str]
+    lastmodified: "2026-02-21T23:17:15Z"
+    mac: ENC[AES256_GCM,data:BW6iPk4hvsCyTxDEopRa3P+S6SSRiVzxXxl3DZNfU+ngNOHSAJ0NMC1LvojNWVaqJveQffCPvUlTi03xmdQjnL0Q2h4YbkbneOMHNzvbAOPFRQoIsLEuS0f1Zmg1uuD8Mt3DfZQCMxvhuL49AKNTASyHEZulaHlzm+REUfUwpnY=,iv:SD1Rm57+7sIlJesKHYJXLaipWclV2UA8AAQEVw2yPlw=,tag:wSYyAXPECG0IRbrCGFmLyg==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.9.2
+    version: 3.11.0
diff --git a/modules/nixos/backup.nix b/modules/nixos/backup.nix
@@ -30,14 +30,14 @@
 
   };
   config = {
-    # 100GB storagebox is attached to the build02 server
+    # 100GB storagebox is attached to the build03 server
 
     sops.secrets.hetzner-borgbackup-ssh = {
       sopsFile = "${inputs.self}/modules/secrets/backup.yaml";
     };
 
     programs.ssh.knownHosts.hetzner-storage-box = {
-      hostNames = [ "[u416406.your-storagebox.de]:23" ];
+      hostNames = [ "[u550408.your-storagebox.de]:23" ];
       publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIICf9svRenC/PLKIL9nk6K/pxQgoiFC41wTNvoIncOxs";
     };
 
@@ -46,7 +46,7 @@
         inherit (backup) name;
         value = {
           inherit (backup) paths startAt;
-          repo = "u416406@u416406.your-storagebox.de:/./${config.networking.hostName}-${backup.name}";
+          repo = "u550408@u550408.your-storagebox.de:/./${config.networking.hostName}-${backup.name}";
           encryption.mode = "none";
           compression = "auto,zstd";
           environment.BORG_RSH = "ssh -oPort=23 -i ${config.sops.secrets.hetzner-borgbackup-ssh.path}";
diff --git a/modules/nixos/github-org-backup.nix b/modules/nixos/github-org-backup.nix
@@ -5,7 +5,7 @@
   ...
 }:
 {
-  # 100GB storagebox is attached to the build02 server
+  # 100GB storagebox is attached to the build03 server
 
   imports = [
     inputs.self.nixosModules.backup
diff --git a/modules/secrets/backup.yaml b/modules/secrets/backup.yaml
@@ -1,72 +1,62 @@
-hetzner-borgbackup-ssh: ENC[AES256_GCM,data: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,iv:T9Ib38LMfX7Ljc8Q3Q6qrvpc43c+S4eeHtEEHrItngY=,tag:IIVeZGkPYUqfwivvC3gjRg==,type:str]
+hetzner-borgbackup-ssh: ENC[AES256_GCM,data:ENnylB8zGlcx5Rd8hRQaOBYoPYuLAJpiMVKepwpWa70gbB9wsQck8oOnebCV8KfUgN2qIAHmk+JjwBoPYqunwR6YvUx1s+g+yfQFY8e3qqZMyGsdE4+KCPaXMldUYd8tMt8Fx43XYCkiVzPAx+7eYWLRo29cawdtgbWIvDKy+NSQ5DrNkeLdcI6BhcEB/fJ0TpyL57Wv8dZdIjtdHBzuFSaMf/EqkQVfSdlnJnVcNxTYY2cHbMS+1mQE9pGBNra367u5CYDk1S0hW//34wo8rSj9NK9NKjuz4ouaAX9r+tf6AZolfV9UxpjkP6hudiev8yyvUKCnm766IcqIblTavVq6jy8ilxj//WKw8IlS7VtUx+wcxFeNtj9KqpFHNOVJwJmQY9STrbiMcllRiHL6cncsEKDINKCfDpgRxKFX1cZUGPShL1rDD2FgMsuotBDhUBMwA4t2RIL2Pr4byJKws6XfpFXiRRyj43j6+3ILxslmhNJi7Fzo6akZBwvKZWLc4+Ee,iv:VGa16m1ntWqR2IqD94rmVtbvsWRuS6sIT5YtqMu8oRg=,tag:86DJ7TKC4K6biI4dy5AUdQ==,type:str]
 sops:
     age:
-        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMm3/o1HguyRL1z/nZxLBY9j/YUNXeNuDoiBLZAyt88Z
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEVTL3RrUSB0cjNP
-            cHA0THc4L3BJRktJWFBrWitWMHdzbXA5ZkUzV0lpMnk2K2gzU0VRCm9GMmtYSWxm
-            NnpLVERpUkRRcW5DcVhSeU1RVG1lUXFYcjhBdGdlL1ZtQ0UKLS0tIGIvdzIzUml5
-            NEVOZXdvNk5MMGNKVm9Janc5UjZpZjJOZWJsTTBCUmZNdUEKsrtXQE/a/H1uR0le
-            DVZpA8S4KykeCEHZHPnsjvShvDuHWEN80is9yA62j6zhirVRdEibr/M0BmQ8pgH+
-            Cm7lIA==
-            -----END AGE ENCRYPTED FILE-----
         - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFiozp1A1+SUfJQPa5DZUQcVc6CZK2ZxL6FJtNdh+2TP
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHczV0xmQSBQK1Va
-            cFVFdmk2bjJKMjUvZDhpeWpVVHM5SFpicXRsbUpRYStpUDlibWdJCm9TR0lEajNz
-            U0dUdmhjcjBUODJBRk02WU4yMjQ5QnJPL2tTTGFCbUNSencKLS0tIFNQYkpkaVRF
-            cGdNV3crNG15Rm9zMWJidkV4enlYY2ZpQzlTaSt1K3ZqTHMKNsRxY950e/GoDuyI
-            nnNi22UwmyHXPMZAh2Pp9DuhOvtE42cLKqSboaUrjryXvnSDpDwCoh8krcsCIbZ/
-            4orT1g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHczV0xmQSBHNkF4
+            ell2S3RvNzhDZFN6ZkNHcTBqL0tJb2VSdTBuVUpNN0l6c1VaSDFZCnFuUURaSnhh
+            QmtLOXE1dDkzMnRtd2xnbzE4dVVjUUowVGFxZWZyRnM4b3cKLS0tIFlWN2hqTXBD
+            cmhmWTZwSzhFeDNWc2p5TVpmOVpZNmltWmVsSnloNkx5SEEK4w3JetcdreN47/4L
+            /sAEWfkdO32/AOccvvY+0ACvYonOsCSY0HgGG9/NDFyJb6nfFO68XvxSkM2C6Ae8
+            /C6KbA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1dzvjjum2p240qtdt2qcxpm7pl2s5w36mh4fs3q9dhhq0uezvdqaq9vrgfy
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWUnQ5U3MrRFlKVzFwWXgy
-            QVB3bjVRdk4rODh5b0ZFR2FJdUJsc21JVlNvCkYvV2g3M2tkeUFsM1d4RkNvVWRj
-            NkhQajJZRy9IemtVK0RMTDY2czk1NkkKLS0tIGxVaG1ZSHBvRy9MNzJ2by9tUEQy
-            RGpkZldaemZhQThNZ3MrdEFaMGExWGMKmMZp0KU7ffYa7gxVDTp3AJO8RvAyURTH
-            3x/aP0NaXHN9QO7NuSCVKvqJP6W0OwvCZKDAqlhqoyzzMz+r0GQeBA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5S2Frdkg2Wi9JdVF1akJr
+            Y1BLcVFPQktWbkVNSkN6aUtxd0l4S0J3eEdVClZyUFBaRm9qRzd6R0o0VWdqNkhx
+            MEkrTG1sVXBoNkM5enQyWnZWOW0yOEUKLS0tIEFUNDVDNWJNNWFIU25OY1FlWjRl
+            b3BIaWpBaWZnMjdDUnF0dDA1Vk00TUEKSWSgvRplf7XwyMVGeL0LIv9vKLGO74o3
+            hHfZntgasUUchY7pCekqDSyRUCMFfYCG/6w0WLGVsetA9k3qqzyrag==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age17n64ahe3wesh8l8lj0zylf4nljdmqn28hvqns2g7hgm9mdkhlsvsjuvkxz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIUTJabElHc3Z3MGhrcjJB
-            Z2RvSFNNL0xWTTlPTTJoN3FJc1Z5aDRUL3pNCmRvTUw1cW9vRjExcUR6bDNIRkhq
-            Vk1lcCt1KytYcVEwL3gwdllLRUlwM2MKLS0tIE1WMnIrL1VTZVdhRzlpK3I1VUVi
-            cXladTZJRjdla09MQWlnTnpVOENBVW8KDrnWjXCeVzcJaChk5EpF+OkjQTDH4R5j
-            +HaVIkXoEXQqfA5+/w5/xTe7D+6S5pakGUMDs+CAmSgOxnDtq364Og==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqVk92VHgzOUNnalQyT3Ni
+            TUx6dEpUZlNDa0drNW5sb1BqNDRkbW8ySFJFCjE4NXhNekJJc1BlZHl0eFE5bkla
+            SE1YYkx6L2VKbFVqTzVVMHlHRHdkc0UKLS0tIEZmT0J0WlIzMVBsemNWR3EvNTJY
+            VThNSDhEcThBUmJpM0NsV2E2U3hjRm8KfQx2D43rRqjjvPr+CvVqRscU5t2YAhaJ
+            A0eBLSVLvYlaxTgmYjLOUlAi9hw0/LB+vJr+a8IoeIRa+c+FyfXY0Q==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1d87z3zqlv6ullnzyng8l722xzxwqr677csacf3zf3l28dau7avfs6pc7ay
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiRkZzdVJENzlGRXJIT3Rr
-            blo4LzdVcXJXdDN1WUw5T2NSMStlTDFIL1VJCmtJWUxWOEZ6SDRXV0FqOGJQNU1J
-            czFXWTlueDRCU0ZndWZhbitFR2ZzM0EKLS0tIHBseWw5ekNZSEIrbEhuWkgxN29O
-            K24wY3REM1J3Q1d3Qlc5Y0RMaGszOVEKa8QCuX9wYb3vWIM97AOUn/zdz051NqaU
-            ajtwDDciQ8F4GuW9U5+AjSf0Mb3z4JdiB21p2jA9yIgrBECCFxQIKA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVSHdEWjVzaHhEZkJZdXpX
+            Uk1jdzduZkZtZm5HV1cxQjU5T3E4T3dMWWhZCnYzWTY0akliR0V4YTE5aEJXUHpB
+            WjdPQk82V3RjbVR0YzVKcWdKb25iQ2sKLS0tIEswcnU1TWV1aVladWxUZXZKTUxW
+            bXZuNVVEWk9JU0lEMDBzTUtBVXdlUGMKn6u6UjxH8n1Edd/F1oFUy6f6UwZ3fxj/
+            k3+WpU8RmleD+94nU8TPTV/T3iAGPL4conjqEbFrYxxmSAoOKJ9rsQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1jrh8yyq3swjru09s75s4mspu0mphh7h6z54z946raa9wx3pcdegq0x8t4h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUZkRJa0FLdG5YSjMyUW9j
-            SVVzckhNcUhYWG9nWS9Cb0JFYW1BUGREM1NRCk9pSGt6QSsvMW9zakhlZndwdGc1
-            aVJ0MkhLVjVkRVZpWFREbkl1eHpxS2MKLS0tIFExODJJQVc5M2tDYjRSK1VSVndz
-            M1dueFFrcHpPWURVUjhwTCtDUnE1TkEK894JR6dlzQueyIZRAiQbvnmtXw6VjScK
-            J5BgZmnGRoqX2qEAYj+DOSbUzh+VIgg89HLye9qCV2Zn2ANUivHSxQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBremFTNnN5UGRPNFF4MmRm
+            UXg3S1NRVExzY2FTUjJwUVJRelZwR3phVXdzCi9BL2szRFVLUmpKRStSbmlBNGtj
+            cmozWTN6VGZlREJ1bmR1N2w5clFkTFkKLS0tIHVsUVpXK1NFRmZJcUNwTlNFZWpv
+            cjV6OXRqUS9oNXZvL0dlTWlmMWVOOVEKTiJNPb8aG3Zw4bfwCXguLF2m2rLf7tRZ
+            Smx2oxuEx4aSaneOMU+ZsckpdK/KXKGQlSSb2OwJDSrpSUndQMa7NA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1m7xhem3qll35d539f364pm6txexvnp6k0tk34d8jxu4ry3pptv7smm0k5n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5aVRMMUxlTGNOc1hVOHVm
-            OHpjbkRTelBvT3c0NVRLem5VRjA5QTZCblRZCmNBeFBNaWRha3NDa2Nzc0dFT2Vn
-            YTBxQWZwNlplOVk2aWgxY0Y5eit2OVkKLS0tIG5jSjIyWjZhdGJ0NnZCTlpUMzhq
-            RGZ6Mmwrd08wN3lMYVE5V1lGS3hZbHcKY6Us+t+7vRhGLWkb8kS84/+2L9umcX0q
-            smQALmDMDO+LtkNCW5CZNReSUeCX6FHCFoh/BsuI6E+5/YL15IwyOw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBSTJsaWV4enNCampoUkpI
+            V295NmNIRGxXK05DWlFSa2J5U2lXODUwaHo4ClM0RTNYWmVqWC9BbzJYd0VZQ0hh
+            NHJJdlpjUVE1b056ZVpwVEJkMW5KSTAKLS0tIGZtYzRkMWVrUFFUdVhwWlM5aVAr
+            Q0lhemQvUmV2OG9hVWt4anYrSm1xclUKoHD0zW+ATzmUGrsB0bUqo5UeDVDb3VF1
+            rW80qhLxnTdUUKYpuAjnMQJF0oGEvbesOr4pOaVsxOhka1+oBtbe3g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-19T00:28:56Z"
-    mac: ENC[AES256_GCM,data:jc/oaE8thHZzrCkHfcD40YiyZczKoltvxU9DkX8VUsCkLaEIHjoPyyo82EA4DH3GH4Nk4f6+AN84MFzBjh4k/2PVctUukpB5uqQyTtluhMxA7MhIaIquDA44qmYU3tg3jTaTJwaWzUf1UdFxjOG489U7coqWzPtSw4yMLLK6KEk=,iv:fymEmLFZGHWpoNbUYZuqydF1ssGCqKVYqOOVtkLbVbQ=,tag:ZXFZI24XBCLqUaNAUlW7gA==,type:str]
+    lastmodified: "2026-02-21T23:36:25Z"
+    mac: ENC[AES256_GCM,data:W8L0ZgLw8RJQy8jh5B55YFn4ATsTVGtQQeApbTMgbwdUCd4pZt+WtCexEaNH951TyWZ35ErE+xWa/U6AazhwT3/m60i5XnXZVn7hwG31b4CGIipdPT1A9J19uQ78sm6L/BPUh3j1bNWB2XIB964Nuh/cKvqI7RXuugq0wF1yfUg=,iv:32stgp8PYFIUIb2eaeEnOXSlJrpXJ+caJjUncH+G/Tk=,tag:SKHfZaEDmzO1SfFxEzRpMw==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.9.2
+    version: 3.11.0
diff --git a/sops.nix b/sops.nix
@@ -27,7 +27,6 @@ let
   }
   // builtins.mapAttrs (_: value: (map (x: hosts.${x}) value)) {
     "modules/secrets/backup.yaml" = [
-      "build02"
       "build03"
     ];
     "modules/secrets/community-builder.yaml" = [

Original file line number	Diff line number	Diff line change
`@@ -5,7 +5,7 @@`
`5`	`5`	`...`
`6`	`6`	`}:`
`7`	`7`	`{`
`8`		`- # 100GB storagebox is attached to the build02 server`
	`8`	`+ # 100GB storagebox is attached to the build03 server`
`9`	`9`
`10`	`10`	`imports = [`
`11`	`11`	`inputs.self.nixosModules.backup`
Original file line number	Diff line number	Diff line change
`@@ -27,7 +27,6 @@ let`
`27`	`27`	`}`
`28`	`28`	`// builtins.mapAttrs (_: value: (map (x: hosts.${x}) value)) {`
`29`	`29`	`"modules/secrets/backup.yaml" = [`
`30`		`- "build02"`
`31`	`30`	`"build03"`
`32`	`31`	`];`
`33`	`32`	`"modules/secrets/community-builder.yaml" = [`