mirror of
https://github.com/kmein/niveum
synced 2026-03-16 10:11:08 +01:00
Kierán Meinhardt
d03c6bb0de
feat(zaatar): convert to flake feat(tahina, tabula): convert to flake feat(makanek): convert to flake feat(manakish, zaatar): convert to flake feat(ci): build flake systems fix: ci build feat: secrets via submodule foo foo foo
53 lines
1.3 KiB
Nix
53 lines
1.3 KiB
Nix
{
|
|
pkgs,
|
|
config,
|
|
...
|
|
}: let
|
|
inherit (import ../lib) restic;
|
|
in {
|
|
services.restic.backups.niveum = {
|
|
initialize = true;
|
|
inherit (restic) repository;
|
|
timerConfig = {
|
|
OnCalendar = "8:00";
|
|
RandomizedDelaySec = "1h";
|
|
};
|
|
passwordFile = config.age.secrets.restic.path;
|
|
extraBackupArgs = [
|
|
"--exclude=/home/kfm/projects/nixpkgs/.git"
|
|
"--exclude=node_modules"
|
|
];
|
|
paths = [
|
|
"/home/kfm/work"
|
|
"/home/kfm/projects"
|
|
"/home/kfm/notes"
|
|
"/home/kfm/cloud"
|
|
"/home/kfm/.gnupg"
|
|
"/home/kfm/.ssh"
|
|
"/mnt/sd-card/music"
|
|
"/mnt/sd-card/Books"
|
|
];
|
|
};
|
|
|
|
systemd.services.restic-backups-niveum.serviceConfig = {
|
|
Restart = "on-failure";
|
|
RestartSec = "15s";
|
|
StartLimitIntervalSec = "1m"; # don't try more than 4 times
|
|
StartLimitBurst = 4;
|
|
};
|
|
|
|
environment.systemPackages = [
|
|
(pkgs.writers.writeDashBin "restic-niveum" ''
|
|
${pkgs.restic}/bin/restic -r ${restic.repository} -p ${config.age.secrets.restic.path} "$@"
|
|
'')
|
|
(pkgs.writers.writeDashBin "restic-mount" ''
|
|
mountdir=$(mktemp -d)
|
|
trap clean EXIT
|
|
clean() {
|
|
rm -r "$mountdir"
|
|
}
|
|
${pkgs.restic}/bin/restic -r ${restic.repository} -p ${config.age.secrets.restic.path} mount "$mountdir"
|
|
'')
|
|
];
|
|
}
|