From aa378b9e01e211f62063f0b6c1ad84417b15bb7f Mon Sep 17 00:00:00 2001
From: schererleander <leander@schererleander.de>
Date: Sat, 14 Mar 2026 21:09:15 +0100
Subject: feat(secrets): add borgbase repo secrets

---
 modules/services/nextcloud.nix | 3 ++-
 modules/system/secrets.nix     | 6 +++++-
 2 files changed, 7 insertions(+), 2 deletions(-)

(limited to 'modules')

diff --git a/modules/services/nextcloud.nix b/modules/services/nextcloud.nix
index 7e4f743..ee1558e 100644
--- a/modules/services/nextcloud.nix
+++ b/modules/services/nextcloud.nix
@@ -91,7 +91,8 @@
         preHook = ''
           set -euo pipefail
 
-          export BORG_REPO="$(cat ${config.sops.secrets."borg_repo".path})"
+          # Exporting the specific Nextcloud repo secret
+          export BORG_REPO="$(cat ${config.sops.secrets."borg_nextcloud_repo".path})"
 
           INSTALL="${pkgs.coreutils}/bin/install"
           FIND="${pkgs.findutils}/bin/find"
diff --git a/modules/system/secrets.nix b/modules/system/secrets.nix
index 90622fb..2a42fe7 100644
--- a/modules/system/secrets.nix
+++ b/modules/system/secrets.nix
@@ -32,7 +32,11 @@
             owner = "administrator";
             mode = "0600";
           };
-          "borg_repo" = {
+          "borg_git_repo" = {
+            owner = "root";
+            mode = "0600";
+          };
+          "borg_nextcloud_repo" = {
             owner = "root";
             mode = "0600";
           };
-- 
cgit v1.3.1