From 298e2a51b27aec65c34248b272e79ddd227369f5 Mon Sep 17 00:00:00 2001
From: SebastianStork <sebastian.stork@pm.me>
Date: Tue, 10 Jun 2025 14:29:38 +0200
Subject: [PATCH] Configure backups for uptime-kuma

---
 hosts/cumulus/default.nix                            |  1 +
 hosts/cumulus/secrets.yaml                           |  8 ++++++--
 modules/system/services/uptime-kuma/backups.nix      | 12 ++++++++++++
 .../{uptime-kuma.nix => uptime-kuma/default.nix}     |  0
 4 files changed, 19 insertions(+), 2 deletions(-)
 create mode 100644 modules/system/services/uptime-kuma/backups.nix
 rename modules/system/services/{uptime-kuma.nix => uptime-kuma/default.nix} (100%)

diff --git a/hosts/cumulus/default.nix b/hosts/cumulus/default.nix
index 9b25d7b..924696d 100644
--- a/hosts/cumulus/default.nix
+++ b/hosts/cumulus/default.nix
@@ -15,6 +15,7 @@
       uptimeKuma = {
         enable = true;
         domain = "uptime.${config.custom.services.tailscale.domain}";
+        backups.enable = true;
       };
       ntfy = {
         enable = true;
diff --git a/hosts/cumulus/secrets.yaml b/hosts/cumulus/secrets.yaml
index 3bb96fd..5864b02 100644
--- a/hosts/cumulus/secrets.yaml
+++ b/hosts/cumulus/secrets.yaml
@@ -1,6 +1,10 @@
 seb-password: ENC[AES256_GCM,data:laGJomW5c5TB3alpPgZKElQ3Y46OBxPrA0AxVNgx/09oSuG0EM63cnnkwZkrTeZxqjBH2UOryLqCr9DUr9mhZsovqNtZ2t8Uzg==,iv:GpBQNm1jspU8PCN+SzfAUKSps3YySg6JJVYOLOFetOI=,tag:2nARGI9XwzLfJFRhDyGBSw==,type:str]
 tailscale-auth-key: ENC[AES256_GCM,data:FKHQsrLhELUKUg/nuf/UakS14Qj8z3arRR3366Cc3wag8+lpLrVjKXT8a5ZFd4ZtIghrCSvyXUefAKcVmQ==,iv:jvuoo8DD7ls0WZA6ZrCbz3w4O8NCyXZjv1mscnx/T94=,tag:HczecDubwKkCVu04rqhh9w==,type:str]
 service-tailscale-auth-key: ENC[AES256_GCM,data:S1LXXdGd78y1LAAeBxQ/yC8ggm/Mq8JkXVx7umMEk6nlOx0NLHqklSJ8JX+QUhgmx9hoCBSKJ9q1DxbFzsw=,iv:uDAG/00sl/n+Tp11SmsEQFKWQ9KOxcWfvgnFnIUuMcw=,tag:3A8vv97+HmTzBVxH9hqEfg==,type:str]
+restic:
+  environment: ENC[AES256_GCM,data:0slVHi88t9iqM8kdp+iWngLO4+fsUztma0wGghFl1gCvgWCrF59N1x2KkrfsMynMOX5EsnokELWJvctpQyeJun/heSwVheH9MlYkx5USKjHIfc82hgcY/9PMpLK8gqCpbEw=,iv:EnNlyIBZgRT7d8o0KTDcPV5uNSfDwbmss3M5rxMwAns=,tag:wcMnfb8FqlInvHj4NI7V4g==,type:str]
+  password: ENC[AES256_GCM,data:/VY9RlJ6MTHhAPQ7BODp0M3rgoNFUIDDFkg++PoL,iv:LxubXHR6F1X6vkdbLmbNt/o1hYAULhSXQw8587jQkls=,tag:E67MoC5ViZyKaSPP4Mg3Kw==,type:str]
+healthchecks-ping-key: ENC[AES256_GCM,data:j2AJZ0VvRxJMsy1VSA/7mOmCBka2KA==,iv:5LjD9u08wdU3W+RlL8UK5AaU9GSy+6FqTUTkIJkea2c=,tag:wKOjFncxgURIlQSCBLXLSw==,type:str]
 sops:
   age:
     - recipient: age1mpq8m4p7dnxh5ze3fh7etd2k6sp85zdnmp9te3e9chcw4pw07pcq960zh5
@@ -21,7 +25,7 @@ sops:
         V1F2cjlmRWNKWkN1U3hwNWl6U2lEb1kKgsj22mpgxpgA5oXTXhoA5DtkySqqcn17
         OrpUiZmfOABXEZ0b5pnkAD06aW+7j2SqajYpvguxIrD9x1w562FmZA==
         -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2025-06-07T23:01:03Z"
-  mac: ENC[AES256_GCM,data:Al87St+xOFjidar0AVvD2QlxjiO1v1ps7IrNfwMaj04d9+xbCvoxCvcshwJwLL2AT9nXXuLfIDVeABpVSYvYgsu7n2TsDKrKIBff/q4SeNTcB98lRd1M8kX/XEM2nzqbvWtys+NK3xyODKDDNNHkKH5ZGrKJPmRzom5r+sWiblw=,iv:xxFj7CqwbqnlJlEUkNkoJtDEcKgO4V79u22TkCivzMI=,tag:1m/i1uVKGyoDNXsJx1Biug==,type:str]
+  lastmodified: "2025-06-09T21:39:42Z"
+  mac: ENC[AES256_GCM,data:25WhVN2xQjwzG+ntaTXStMDFZOc57PTaHyb1aWRZpQt5hKR9Ot+nhyx0PrzckgOCfBXBBlzetRBGj0akLhVEMKNXtsLzI6BIttqgH1RniZqM35wEOp63ZNYwpXCB23tYyNkoiDheb/yWDVuWMlJxj5vgYv1BFhPo2MbHGGcLDHU=,iv:2hWf8B6C0SdHiG2T1906zChuElhB/Ae0MPzr3mz1zD0=,tag:UELD567RvAcz02Fgcg74Hg==,type:str]
   unencrypted_suffix: _unencrypted
   version: 3.10.2
diff --git a/modules/system/services/uptime-kuma/backups.nix b/modules/system/services/uptime-kuma/backups.nix
new file mode 100644
index 0000000..892d1e1
--- /dev/null
+++ b/modules/system/services/uptime-kuma/backups.nix
@@ -0,0 +1,12 @@
+{ config, lib, ... }:
+{
+  options.custom.services.uptimeKuma.backups.enable = lib.mkEnableOption "";
+
+  config = lib.mkIf config.custom.services.uptimeKuma.backups.enable {
+    custom.services.resticBackups.uptime-kuma = {
+      healthchecks.enable = false;
+      dependentService = "uptime-kuma.service";
+      extraConfig.paths = [ "/var/lib/private/uptime-kuma" ];
+    };
+  };
+}
diff --git a/modules/system/services/uptime-kuma.nix b/modules/system/services/uptime-kuma/default.nix
similarity index 100%
rename from modules/system/services/uptime-kuma.nix
rename to modules/system/services/uptime-kuma/default.nix