+ name = "backup-from-eldiron";
+ root_fs = "zpool/backup";
+ serve.type = "tls";
+ serve.listen = ":19000";
+ serve.ca = config.secrets.fullPaths."zrepl/certificates/eldiron.crt";
+ serve.cert = config.secrets.fullPaths."zrepl/certificates/dilion.crt";
+ serve.key = config.secrets.fullPaths."zrepl/dilion.key";
+ serve.client_cns = [ "eldiron" ];
+ }
+ {
+ type = "source";
+ # must not change
+ name = "backup-to-wd-zpool";
+ # not encrypted!
+ serve.type = "tls";
+ serve.listen = ":19001";
+ serve.ca = config.secrets.fullPaths."zrepl/certificates/flony.crt";
+ serve.cert = config.secrets.fullPaths."zrepl/certificates/dilion.crt";
+ serve.key = config.secrets.fullPaths."zrepl/dilion.key";
+ serve.client_cns = [ "flony" ];
+ filesystems."zpool/libvirt<" = true;
+ filesystems."zpool/root<" = true;
+ snapshotting.type = "manual";
+ }
+ {
+ type = "source";
+ # must not change
+ name = "backup-to-wd-zpool-docker";
+ # not encrypted!
+ serve.type = "tls";
+ serve.listen = ":19002";
+ serve.ca = config.secrets.fullPaths."zrepl/certificates/flony.crt";
+ serve.cert = config.secrets.fullPaths."zrepl/certificates/dilion.crt";
+ serve.key = config.secrets.fullPaths."zrepl/dilion.key";
+ serve.client_cns = [ "flony" ];
+ filesystems."zpool/docker<" = true;
+ snapshotting.type = "manual";
+ }
+ ];
+ };