dotfiles/nixos/boxes/vpsfree1/backups.nix

61 lines
1.5 KiB
Nix
Raw Normal View History

2023-08-13 17:00:41 +01:00
{
config,
pkgs,
...
}: let
2022-12-02 22:13:18 +00:00
genericBackupPath = "/var/lib/backups/";
2023-12-23 13:46:39 +00:00
nixosContainersBackupPath = "/var/lib/nixos-containers/";
2022-12-02 22:13:18 +00:00
in rec {
2023-08-13 17:00:41 +01:00
environment.systemPackages = with pkgs; [restic];
2022-08-20 10:13:25 +01:00
sops.secrets."restic-backups-b2-repo-password" = {
sopsFile = ./restic.sops.yaml;
};
sops.secrets."restic-backups-b2-environment" = {
sopsFile = ./restic-environment.sops;
format = "binary";
path = "/etc/nixos/secrets/b2-env";
};
services = {
restic.backups.b2 = {
passwordFile = "/run/secrets/restic-backups-b2-repo-password";
2022-12-02 22:13:18 +00:00
paths = [
"/var/lib/foundryvtt"
"/var/lib/gitea"
"/var/lib/mastodon"
2023-12-23 13:46:39 +00:00
"${nixosContainersBackupPath}"
2022-12-02 22:13:18 +00:00
];
2022-08-20 10:13:25 +01:00
repository = "b2:cyplo-restic-vpsfree";
2022-12-02 22:13:18 +00:00
backupPrepareCommand = ''
systemctl stop container@mastodon.service
2022-12-02 22:13:18 +00:00
'';
backupCleanupCommand = ''
systemctl start container@mastodon.service
'';
2023-08-13 17:00:41 +01:00
timerConfig = {OnCalendar = "daily";};
environmentFile = "${config.sops.secrets.restic-backups-b2-environment.path}";
2023-12-23 13:46:39 +00:00
extraBackupArgs = [
"--exclude='cache'"
];
2023-12-23 16:47:23 +00:00
pruneOpts = [
"--keep-hourly 25"
"--keep-daily 8"
"--keep-weekly 5"
"--keep-monthly 13"
"--keep-yearly 2"
];
2022-08-20 10:13:25 +01:00
};
};
systemd.services.restic-backups-b2 = {
2023-12-23 13:46:39 +00:00
environment = {
GOMAXPROCS = "1";
GOGC = "20";
};
serviceConfig = {
Nice = 19;
IOSchedulingClass = "idle";
};
2022-08-20 10:13:25 +01:00
};
}