backup-client: don't implicitely set path to secrets

1 files changed, 10 insertions, 18 deletions

diff --git a/usecases/common/backup-client.nix b/usecases/common/backup-client.nix
index a9acd7a..d942c90 100644
--- a/usecases/common/backup-client.nix
+++ b/usecases/common/backup-client.nix
@@ -10,23 +10,15 @@ with lib;
     description = "List of Borgbackup jobs for which we want nice defaults";
   };
 
-  config.services.borgbackup.jobs = let
-    passFile = name:
-      "/etc/nixos/usecases/common/backup-client/private/${name}_pass.txt";
-    keyFile = name:
-      "/etc/nixos/usecases/common/backup-client/private/${name}_key";
-  in genAttrs config.services.borgbackup.jobList (name: {
-    compression = mkDefault "auto,zstd";
-    encryption = {
-      mode = mkDefault "repokey";
-      passCommand = mkDefault "cat ${passFile name}";
-    };
+  config.services.borgbackup.jobs = genAttrs
+    config.services.borgbackup.jobList
+    (name: {
+      compression = mkDefault "auto,zstd";
+      encryption = {
+        mode = mkDefault "repokey";
+      };
 
-    environment = {
-      BORG_RSH = mkDefault "ssh -i ${keyFile name}";
-    };
-
-    extraCreateArgs = mkDefault "--stats";
-    extraPruneArgs = mkDefault "--list --stats";
-  });
+      extraCreateArgs = mkDefault "--stats";
+      extraPruneArgs = mkDefault "--list --stats";
+    });
 }