mirror of
https://github.com/kmein/niveum
synced 2026-03-16 18:21:07 +01:00
38 lines
1004 B
Nix
38 lines
1004 B
Nix
{ pkgs, config, ... }:
|
|
let
|
|
inherit (import <niveum/lib>) restic;
|
|
in
|
|
{
|
|
services.restic.backups.niveum = {
|
|
initialize = true;
|
|
inherit (restic) repository;
|
|
timerConfig = { OnCalendar = "00:05"; RandomizedDelaySec = "5h"; };
|
|
passwordFile = toString <secrets/restic/password>;
|
|
extraBackupArgs = [
|
|
"--exclude=/home/kfm/projects/nixpkgs/.git"
|
|
"--exclude=node_modules"
|
|
];
|
|
paths = [
|
|
"/home/kfm/work"
|
|
"/home/kfm/projects"
|
|
"/home/kfm/cloud"
|
|
"/home/kfm/.gnupg"
|
|
"/home/kfm/.ssh"
|
|
];
|
|
};
|
|
|
|
environment.systemPackages = [
|
|
(pkgs.writers.writeDashBin "restic-niveum" ''
|
|
${pkgs.restic}/bin/restic -r ${restic.repository} -p ${<secrets/restic/password>} "$@"
|
|
'')
|
|
(pkgs.writers.writeDashBin "restic-mount" ''
|
|
mountdir=$(mktemp -d)
|
|
trap clean EXIT
|
|
clean() {
|
|
rm "$mountdir"
|
|
}
|
|
${pkgs.restic}/bin/restic -r ${restic.repository} -p ${<secrets/restic/password>} mount "$mountdir"
|
|
'')
|
|
];
|
|
}
|