mirror of
https://git.sr.ht/~rouven/nixos-config
synced 2024-11-15 21:33:11 +01:00
47 lines
1.1 KiB
Nix
47 lines
1.1 KiB
Nix
{ config, pkgs, ... }:
|
|
{
|
|
age.secrets."borg/passphrase" = {
|
|
file = ../../../../secrets/thinkpad/borg/passphrase.age;
|
|
owner = "rouven";
|
|
};
|
|
environment.systemPackages = [ pkgs.borgbackup ];
|
|
services.borgmatic = {
|
|
enable = true;
|
|
settings = {
|
|
source_directories = [
|
|
"/var/lib"
|
|
"/var/log"
|
|
"/nix/persist"
|
|
"/home"
|
|
"/etc/secureboot"
|
|
];
|
|
|
|
repositories = [
|
|
{
|
|
label = "nuc";
|
|
path = "ssh://root@192.168.42.2/mnt/backup/thinkpad";
|
|
}
|
|
];
|
|
exclude_patterns = [
|
|
"/home/*/.cache"
|
|
"/home/*/.zcomp*"
|
|
"/home/*/.zcomp*"
|
|
"/home/*/.gradle*"
|
|
"/home/*/.java*"
|
|
"/home/*/.m2*"
|
|
"/home/*/.wine*"
|
|
"/home/*/.mypy_cache*"
|
|
"/home/*/.local/share"
|
|
"/home/*/.local/share"
|
|
"/home/*/Linux/Isos"
|
|
];
|
|
encryption_passcommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets."borg/passphrase".path}";
|
|
compression = "lz4";
|
|
keep_daily = 7;
|
|
keep_weekly = 4;
|
|
keep_monthly = 12;
|
|
keep_yearly = 3;
|
|
};
|
|
};
|
|
}
|