mirror of
https://git.sr.ht/~rouven/nixos-config
synced 2024-11-15 21:33:11 +01:00
54 lines
1.2 KiB
Nix
54 lines
1.2 KiB
Nix
{ config, pkgs, ... }:
|
|
{
|
|
age.secrets."borg/passphrase" = {
|
|
file = ../../../../secrets/nuc/borg/passphrase.age;
|
|
};
|
|
environment.systemPackages = [ pkgs.borgbackup ];
|
|
fileSystems."/mnt/backup" =
|
|
{
|
|
device = "/dev/disk/by-uuid/74e78699-fe27-4467-a9bb-99fc6e8d52c5";
|
|
fsType = "ext4";
|
|
options = [ "nofail" ];
|
|
neededForBoot = false;
|
|
};
|
|
services.borgmatic = {
|
|
enable = true;
|
|
settings = {
|
|
source_directories = [
|
|
"/var/lib"
|
|
"/var/log"
|
|
"/nix/persist"
|
|
];
|
|
# don't backup these for now
|
|
exclude_patterns = [
|
|
"/var/lib/movies"
|
|
"/var/lib/shows"
|
|
];
|
|
repositories = [
|
|
{
|
|
label = "nuc";
|
|
path = "/mnt/backup/nuc";
|
|
}
|
|
];
|
|
encryption_passcommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets."borg/passphrase".path}";
|
|
compression = "lz4";
|
|
keep_daily = 7;
|
|
keep_weekly = 4;
|
|
keep_monthly = 12;
|
|
keep_yearly = 3;
|
|
};
|
|
};
|
|
services.postgresqlBackup = {
|
|
enable = true;
|
|
databases = [
|
|
"authentik"
|
|
"grafana"
|
|
"matrix-synapse"
|
|
"mautrix-telegram"
|
|
"postgres"
|
|
"vaultwarden"
|
|
];
|
|
};
|
|
|
|
}
|