kfm/niveum
1
0
Fork 0
mirror of https://github.com/kmein/niveum synced 2026-03-19 19:41:08 +01:00
Code Releases Activity

feat(restic): add wrapper on zaatar

Browse Source
This commit is contained in:
Kierán Meinhardt
2022-01-19 10:58:44 +01:00
parent 0dc1e167fd
commit 5dbe6b61d1
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
systems/zaatar/backup.nix
View File

@@ -1,19 +1,26 @@
{ lib, ... }: { pkgs, lib, ... }:
let let
niveumLib = import <niveum/lib>; niveumLib = import <niveum/lib>;
inherit (niveumLib) retiolumAddresses restic; inherit (niveumLib) retiolumAddresses restic;
firewall = niveumLib.firewall lib; firewall = niveumLib.firewall lib;
dataDir = "/backup/restic";
in in
{ {
services.restic.server = { services.restic.server = {
enable = true; enable = true;
appendOnly = true; appendOnly = true;
dataDir = "/backup/restic"; inherit dataDir;
prometheus = true; prometheus = true;
extraFlags = [ "--no-auth" ]; # auth is done via firewall extraFlags = [ "--no-auth" ]; # auth is done via firewall
listenAddress = ":${toString restic.port}"; listenAddress = ":${toString restic.port}";
}; };
environment.systemPackages = [
(pkgs.writers.writeDashBin "restic-niveum" ''
${pkgs.restic}/bin/restic -r ${toString dataDir} -p ${<secrets/restic/password>} "$@"
'')
];
networking.firewall = networking.firewall =
let let
dport = restic.port; dport = restic.port;