Scripts and some refactoring

dotspace/configuration.nix

@@ -1,20 +1,7 @@
 { ... }: {
-  security.pki.certificates = [''
-    -----BEGIN CERTIFICATE-----
-    MIIBqzCCAVGgAwIBAgIQRC/rocbzjexwYz5mWw/YYDAKBggqhkjOPQQDAjA0MRQw
-    EgYDVQQKDAtEb3RzcGFjZV92MTEcMBoGA1UEAwwTRG90c3BhY2VfdjEgUm9vdCBD
-    QTAeFw0yNDEwMTgxNjI4NDRaFw0zNDEwMTYxNjI4NDRaMDQxFDASBgNVBAoMC0Rv
-    dHNwYWNlX3YxMRwwGgYDVQQDDBNEb3RzcGFjZV92MSBSb290IENBMFkwEwYHKoZI
-    zj0CAQYIKoZIzj0DAQcDQgAEJA1QxB0h6Hvp/0sjxZ+wedEaC0v8ODGb7TOQFNOR
-    vutG6AeH8F5yRuFmpUjTIXB6nfCn7Ruu1BjL6tjvcAgULqNFMEMwDgYDVR0PAQH/
-    BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwHQYDVR0OBBYEFPzRcD8OgMChBACO
-    jN+KyAth49ZjMAoGCCqGSM49BAMCA0gAMEUCIAy+GTFir9N8Xldw0YjQIRZOrM81
-    mbpG5txU7FzqEOc0AiEA28/SOnR7hSQEslzfeiDbVk1FCIi9AL64cqv1J+0iJc8=
-    -----END CERTIFICATE-----
-  ''];
-
   imports = [
     ./parts/cifs.nix
+    ./parts/pki.nix
     ./parts/tinc.nix
   ];
 }

dotspace/parts/pki.nix

@@ -0,0 +1,15 @@
+{ ... }: {
+  security.pki.certificates = [''
+    -----BEGIN CERTIFICATE-----
+    MIIBqzCCAVGgAwIBAgIQRC/rocbzjexwYz5mWw/YYDAKBggqhkjOPQQDAjA0MRQw
+    EgYDVQQKDAtEb3RzcGFjZV92MTEcMBoGA1UEAwwTRG90c3BhY2VfdjEgUm9vdCBD
+    QTAeFw0yNDEwMTgxNjI4NDRaFw0zNDEwMTYxNjI4NDRaMDQxFDASBgNVBAoMC0Rv
+    dHNwYWNlX3YxMRwwGgYDVQQDDBNEb3RzcGFjZV92MSBSb290IENBMFkwEwYHKoZI
+    zj0CAQYIKoZIzj0DAQcDQgAEJA1QxB0h6Hvp/0sjxZ+wedEaC0v8ODGb7TOQFNOR
+    vutG6AeH8F5yRuFmpUjTIXB6nfCn7Ruu1BjL6tjvcAgULqNFMEMwDgYDVR0PAQH/
+    BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwHQYDVR0OBBYEFPzRcD8OgMChBACO
+    jN+KyAth49ZjMAoGCCqGSM49BAMCA0gAMEUCIAy+GTFir9N8Xldw0YjQIRZOrM81
+    mbpG5txU7FzqEOc0AiEA28/SOnR7hSQEslzfeiDbVk1FCIi9AL64cqv1J+0iJc8=
+    -----END CERTIFICATE-----
+  ''];
+}

remote-system.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+ssh -tA ${1} "
+  cd ~/mlaga97-nix \
+    && git fetch \
+    && git reset --hard origin/main \
+    && ./system.sh \
+    && git push
+" && git fetch

systems/bastion/configuration.nix

@@ -157,6 +157,9 @@
       # Grab a still photo from all cameras once per minute
       "* * * * *  root  /home/lauren_lagarde/bin/GetAllCameraImages > /dev/null"
 
+      # Pack up yesterday's images into a convenient tarball
+      "0 3 * * *  root  /exports/Frigate/LongCam/tar_day.sh $(/run/current-system/sw/bin/date 'yesterday 13:00' +%Y %m %d)"
+
       # TODO: Automatically Collate Camera Images Monthly
     ];
   };