mirror of
https://git.sr.ht/~rouven/nixos-config
synced 2024-11-15 13:23:11 +01:00
33 lines
738 B
Nix
33 lines
738 B
Nix
|
{ config, pkgs, ... }:
|
||
|
|
{
|
||
|
|
sops.secrets."borg/passphrase" = { };
|
||
|
|
environment.systemPackages = [ pkgs.borgbackup ];
|
||
|
|
services.borgmatic = {
|
||
|
|
enable = true;
|
||
|
|
settings = {
|
||
|
|
location = {
|
||
|
|
source_directories = [
|
||
|
|
"/var/lib"
|
||
|
|
"/var/log"
|
||
|
|
"/etc/crowdsec"
|
||
|
|
"/root"
|
||
|
|
];
|
||
|
|
|
||
|
|
repositories = [
|
||
|
|
"ssh://root@192.168.10.2/mnt/backup/falkenstein"
|
||
|
|
];
|
||
|
|
};
|
||
|
|
storage = {
|
||
|
|
encryption_passcommand = "${pkgs.coreutils}/bin/cat ${config.sops.secrets."borg/passphrase".path}";
|
||
|
|
compression = "lz4";
|
||
|
|
};
|
||
|
|
retention = {
|
||
|
|
keep_daily = 7;
|
||
|
|
keep_weekly = 4;
|
||
|
|
keep_monthly = 12;
|
||
|
|
keep_yearly = 3;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|