nixos-config/hosts/nuc/modules/backup/default.nix

37 lines
884 B
Nix

{ config, pkgs, ... }:
{
age.secrets."borg/passphrase" = {
file = ../../../../secrets/nuc/borg/passphrase.age;
};
environment.systemPackages = [ pkgs.borgbackup ];
fileSystems."/mnt/backup" =
{
device = "/dev/disk/by-uuid/74e78699-fe27-4467-a9bb-99fc6e8d52c5";
fsType = "ext4";
options = [ "nofail" ];
neededForBoot = false;
};
services.borgmatic = {
enable = true;
settings = {
source_directories = [
"/var/lib"
"/var/log"
"/nix/persist"
];
repositories = [
{
label = "nuc";
path = "/mnt/backup/nuc";
}
];
encryption_passcommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets."borg/passphrase".path}";
compression = "lz4";
keep_daily = 7;
keep_weekly = 4;
keep_monthly = 12;
keep_yearly = 3;
};
};
}