bundlewrap/nodes/backup-kunsi.toml

53 lines
1.6 KiB
TOML

hostname = "2a01:4f9:3b:436d::2"
bundles = [
"backup-server",
"dm-crypt",
"smartd",
"zfs",
]
groups = ["debian-bookworm"]
[metadata]
nameservers = ["2001:4860:4860::8888"]
[metadata.apt.unattended-upgrades]
# requires manual apply to unlock disks
reboot_enabled = false
[metadata.interfaces.enp0s31f6]
ips = ["2a01:4f9:3b:436d::2/64"]
gateway6 = "fe80::1"
[metadata.backups]
# this is the backup server
exclude_from_backups = true
[metadata.backup-server.zpool_create_options]
ashift = 12
[metadata.backup-server.encrypted-devices.ZR57ZPJ8]
device = "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR57ZPJ8-part4"
passphrase = "!bwpass:bw/backup-kunsi/ata-ST16000NM001J-2TW113_ZR57ZPJ8-part4"
[metadata.backup-server.encrypted-devices.ZR58YEYV]
device = "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR58YEYV-part4"
passphrase = "!bwpass:bw/backup-kunsi/ata-ST16000NM001J-2TW113_ZR58YEYV-part4"
[metadata.backup-server.encrypted-devices.ZR5C2ER6]
device = "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR5C2ER6-part4"
passphrase = "!bwpass:bw/backup-kunsi/ata-ST16000NM001J-2TW113_ZR5C2ER6-part4"
[metadata.backup-server.encrypted-devices.ZR5C6MF4]
device = "/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR5C6MF4-part4"
passphrase = "!bwpass:bw/backup-kunsi/ata-ST16000NM001J-2TW113_ZR5C6MF4-part4"
[metadata.smartd]
disks = [
"/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR57ZPJ8",
"/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR58YEYV",
"/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR5C2ER6",
"/dev/disk/by-id/ata-ST16000NM001J-2TW113_ZR5C6MF4",
]
[metadata.zfs]
scrub_when = "Wed 08:00 Europe/Berlin"