SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 17:31:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Modularize the backup configuration

Browse source
This commit is contained in:
SebastianStork 2024-09-09 00:16:32 +02:00
parent e333333914
commit 40a8ba846a
4 changed files with 101 additions and 88 deletions
Download patch file Download diff file Expand all files Collapse all files

5
hosts/stratus/containers/default.nix
View file

@ -66,10 +66,7 @@ in
...
}:
{
imports = [
"${self}/modules/system/sops.nix"
"${self}/modules/system/tailscale.nix"
];
imports = [ self.nixosModules.default ];
system = {
inherit stateVersion;

57
hosts/stratus/containers/nextcloud/backup.nix
View file

@ -6,49 +6,26 @@
...
}:
{
sops.secrets = {
"restic/environment" = {
owner = config.users.users.nextcloud.name;
inherit (config.users.users.nextcloud) group;
};
"restic/password" = {
owner = config.users.users.nextcloud.name;
inherit (config.users.users.nextcloud) group;
};
};
systemd.tmpfiles.rules = [ "d ${dataDir}/backup 700 nextcloud nextcloud -" ];
systemd.tmpfiles.rules = [
"d ${dataDir}/backup 700 nextcloud nextcloud -"
"d /var/cache/restic-backups-nextcloud 700 nextcloud nextcloud -"
];
services.restic.backups.nextcloud = {
initialize = true;
myConfig.resticBackup.nextcloud = {
enable = true;
user = config.users.users.nextcloud.name;
repository = "s3:https://s3.eu-central-003.backblazeb2.com/stork-atlas/nextcloud";
environmentFile = config.sops.secrets."restic/environment".path;
passwordFile = config.sops.secrets."restic/password".path;
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 5"
"--keep-monthly 6"
"--keep-yearly 1"
];
backupPrepareCommand = ''
${lib.getExe' config.services.nextcloud.occ "nextcloud-occ"} maintenance:mode --on
${lib.getExe' config.services.postgresql.package "pg_dump"} nextcloud --format=custom --file=${dataDir}/backup/db.dump
'';
backupCleanupCommand = ''
${lib.getExe' config.services.nextcloud.occ "nextcloud-occ"} maintenance:mode --off
'';
paths = [
"${dataDir}/home/data"
"${dataDir}/home/config/config.php"
"${dataDir}/backup"
];
extraConfig = {
backupPrepareCommand = ''
${lib.getExe' config.services.nextcloud.occ "nextcloud-occ"} maintenance:mode --on
${lib.getExe' config.services.postgresql.package "pg_dump"} nextcloud --format=custom --file=${dataDir}/backup/db.dump
'';
backupCleanupCommand = ''
${lib.getExe' config.services.nextcloud.occ "nextcloud-occ"} maintenance:mode --off
'';
paths = [
"${dataDir}/home/data"
"${dataDir}/home/config/config.php"
"${dataDir}/backup"
];
};
};
environment.systemPackages = [

66
hosts/stratus/containers/paperless/backup.nix
View file

@ -6,52 +6,30 @@
...
}:
{
sops.secrets = {
"restic/environment" = {
owner = config.users.users.paperless.name;
inherit (config.users.users.paperless) group;
};
"restic/password" = {
owner = config.users.users.paperless.name;
inherit (config.users.users.paperless) group;
};
};
systemd.tmpfiles.rules = [
"d ${dataDir}/backup 700 paperless paperless -"
"d /var/cache/restic-backups-paperless 700 paperless paperless -"
];
services.restic.backups.paperless = {
initialize = true;
inherit (config.services.paperless) user;
repository = "s3:https://s3.eu-central-003.backblazeb2.com/stork-atlas/paperless";
environmentFile = config.sops.secrets."restic/environment".path;
passwordFile = config.sops.secrets."restic/password".path;
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 5"
"--keep-monthly 6"
"--keep-yearly 1"
];
backupPrepareCommand = ''
${dataDir}/paperless-manage document_exporter ${dataDir}/backup ${
lib.concatStringsSep " " [
"--compare-checksums"
"--delete"
"--split-manifest"
"--use-filename-format"
"--no-progress-bar"
]
}
'';
paths = [ "${dataDir}/backup" ];
};
systemd.tmpfiles.rules = [ "d ${dataDir}/backup 700 paperless paperless -" ];
users.users.paperless.extraGroups = [ "redis-paperless" ];
myConfig.resticBackup.paperless = {
enable = true;
user = config.users.users.paperless.name;
extraConfig = {
backupPrepareCommand = ''
${dataDir}/paperless-manage document_exporter ${dataDir}/backup ${
lib.concatStringsSep " " [
"--compare-checksums"
"--delete"
"--split-manifest"
"--use-filename-format"
"--no-progress-bar"
]
}
'';
paths = [ "${dataDir}/backup" ];
};
};
environment.systemPackages = [
(pkgs.writeShellApplication {
name = "paperless-restore";