add minio

.gitattributes

@@ -2,3 +2,4 @@
 *.yml linguist-detectable
 
 /secrets/** filter=git-crypt diff=git-crypt
+/newinfra/secrets-git-crypt/** filter=git-crypt diff=git-crypt

newinfra/nix/hive.nix

@@ -117,6 +117,7 @@
       (modulesPath + "/profiles/qemu-guest.nix")
       ./modules/contabo
       ./modules/ingress
+      ./modules/minio
       ./modules/widetom
     ];
 

newinfra/nix/modules/minio/default.nix

@@ -0,0 +1,9 @@
+{ config, ... }: {
+  age.secrets.minio_env_file.file = ../../secrets/minio_env_file.age;
+
+  services.minio = {
+    enable = true;
+    region = "eu";
+    rootCredentialsFile = config.age.secrets.minio_env_file.path;
+  };
+}

newinfra/nix/secrets/minio_env_file.age

@@ -0,0 +1,6 @@
+age-encryption.org/v1
+-> ssh-ed25519 cVCt6g aURyPoqVOIH8dVpkyn+mb8rxwv1hw2hazAgLj/qDxzM
+bOkR3mOiK9pA8CQxTGLpd52UyrTWvZ4cPz4m/khin5w
+--- ALJ+6QKzH/CrCZ8FzdeWFRFZKFt6YOF0bKpLri7yCpU
+ºòNB¤aøŸJya¹«ïÝß»Â8ôó—[<5B>½‹Õ‡鶼˜†Cɳ7X“¾<E2809C>³MB»ºC!«¶ÿc‹pm_wD¤äézÍoยîóHéª'›Ûi§	ã
+®…ÆóÓi8ÅýÉ›:t/=`OüªkZÒ±

newinfra/nix/secrets/secrets.nix

@@ -5,4 +5,5 @@ in
   "widetom_bot_token.age".publicKeys = [ vps1 ];
   "widetom_config_toml.age".publicKeys = [ vps1 ];
   "docker_registry_password.age".publicKeys = [ vps1 ];
+  "minio_env_file.age".publicKeys = [ vps1 ];
 }