Use separate access keys per restic repository

PVE TBC

terraform/backblaze.tf

@@ -64,6 +64,25 @@ resource "b2_application_key" "restic" {
   ]
 }
 
+resource "b2_application_key" "restic_repos" {
+  for_each = toset(["walker", "tang", "casey"])
+
+  key_name  = "restic-${each.key}"
+  bucket_id = b2_bucket.restic.id
+  name_prefix = "${each.key}/"
+  capabilities = [
+    "readFiles",
+    "deleteFiles",
+    "listBuckets",
+    "listFiles",
+    "readBucketEncryption",
+    "readBuckets",
+    "shareFiles",
+    "writeBucketEncryption",
+    "writeFiles",
+  ]
+}
+
 resource "b2_application_key" "infrastructure" {
   key_name = "infrastructure"
   capabilities = [