41 lines
1 KiB
Nix
41 lines
1 KiB
Nix
{
|
|
attrName,
|
|
config,
|
|
lib,
|
|
...
|
|
}:
|
|
let
|
|
secretName = "restic-${attrName}";
|
|
secret = config.age.secrets.${secretName};
|
|
in
|
|
{
|
|
age.secrets = lib.mkSecrets { ${secretName} = { }; };
|
|
|
|
services.restic.backups.remote = {
|
|
repository = "sftp:u459482@u459482.your-storagebox.de:/${attrName}";
|
|
initialize = true;
|
|
paths = [
|
|
config.services.vaultwarden.backupDir
|
|
config.services.syncthing.dataDir
|
|
config.services.forgejo.stateDir
|
|
config.services.postgresqlBackup.location
|
|
config.services.postgresqlBackup.location
|
|
# TODO: Add stateDir options for these
|
|
"/var/lib/headscale"
|
|
"/var/lib/navidrome"
|
|
];
|
|
passwordFile = secret.path;
|
|
pruneOpts = [
|
|
"--keep-daily 7"
|
|
"--keep-weekly 5"
|
|
"--keep-monthly 12"
|
|
];
|
|
timerConfig = {
|
|
OnCalendar = "*-*-* 03:00:00";
|
|
Persistent = true;
|
|
};
|
|
extraOptions = [
|
|
"sftp.args='-i /etc/ssh/ssh_host_ed25519_key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null'"
|
|
];
|
|
};
|
|
}
|