dotfiles/nixos/boxes/vpsfree1/backups.nix

44 lines
1.2 KiB
Nix
Raw Normal View History

{ config, pkgs, ... }:
let
2022-12-02 22:13:18 +00:00
genericBackupPath = "/var/lib/backups/";
containersBackupPath = "${genericBackupPath}/oci-containers/";
in rec {
environment.systemPackages = with pkgs; [ restic ];
2022-08-20 10:13:25 +01:00
sops.secrets."restic-backups-b2-repo-password" = {
sopsFile = ./restic.sops.yaml;
};
sops.secrets."restic-backups-b2-environment" = {
sopsFile = ./restic-environment.sops;
format = "binary";
path = "/etc/nixos/secrets/b2-env";
};
services = {
restic.backups.b2 = {
passwordFile = "/run/secrets/restic-backups-b2-repo-password";
2022-12-02 22:13:18 +00:00
paths = [
"/var/lib/foundryvtt"
"/var/lib/gitea"
"/var/lib/mastodon"
"${containersBackupPath}"
];
2022-08-20 10:13:25 +01:00
repository = "b2:cyplo-restic-vpsfree";
2022-12-02 22:13:18 +00:00
backupPrepareCommand = ''
mkdir -p ${containersBackupPath}/
${pkgs.podman}/bin/podman volume export woodpecker-server-data -o ${containersBackupPath}/woodpecker.tar
'';
timerConfig = { OnCalendar = "hourly"; };
environmentFile =
"${config.sops.secrets.restic-backups-b2-environment.path}";
2022-08-20 10:13:25 +01:00
};
};
systemd.services.restic-backups-b2 = {
environment = { GOMAXPROCS = "1"; };
serviceConfig = {
Nice = 19;
IOSchedulingClass = "idle";
};
2022-08-20 10:13:25 +01:00
};
}