# ~$ selfhostedops - restic credentials for backup/backup.sh
# Copy to backup/.restic-env and chmod 600 it. The file is sourced by the
# backup script and by you on a restore box (set -a; . ./.restic-env; set +a).

# Any S3-compatible bucket: Hetzner Object Storage, Backblaze B2, Wasabi,
# MinIO or Garage on a second box. Use a key that can only see this bucket.
RESTIC_REPOSITORY=s3:https://s3.example.com/selfhostedops-backup
AWS_ACCESS_KEY_ID=GK0000000000000000000000
AWS_SECRET_ACCESS_KEY=change-me
AWS_DEFAULT_REGION=garage

# Encrypts everything in the repository. Generate with: openssl rand -hex 32
# Store it in Vaultwarden AND somewhere outside the stack (paper, second
# password manager): without it the backup is a pile of random bytes.
RESTIC_PASSWORD=change-me

# Optional: Uptime Kuma push monitor "Nightly backup" (episode 6).
# KUMA_PUSH_URL=https://status.example.com/api/push/XXXXXXXXXX