Modularize the backup configuration

This commit is contained in:
SebastianStork 2024-09-09 00:16:32 +02:00
parent e333333914
commit 40a8ba846a
4 changed files with 101 additions and 88 deletions

View file

@ -6,52 +6,30 @@
...
}:
{
sops.secrets = {
"restic/environment" = {
owner = config.users.users.paperless.name;
inherit (config.users.users.paperless) group;
};
"restic/password" = {
owner = config.users.users.paperless.name;
inherit (config.users.users.paperless) group;
};
};
systemd.tmpfiles.rules = [
"d ${dataDir}/backup 700 paperless paperless -"
"d /var/cache/restic-backups-paperless 700 paperless paperless -"
];
services.restic.backups.paperless = {
initialize = true;
inherit (config.services.paperless) user;
repository = "s3:https://s3.eu-central-003.backblazeb2.com/stork-atlas/paperless";
environmentFile = config.sops.secrets."restic/environment".path;
passwordFile = config.sops.secrets."restic/password".path;
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 5"
"--keep-monthly 6"
"--keep-yearly 1"
];
backupPrepareCommand = ''
${dataDir}/paperless-manage document_exporter ${dataDir}/backup ${
lib.concatStringsSep " " [
"--compare-checksums"
"--delete"
"--split-manifest"
"--use-filename-format"
"--no-progress-bar"
]
}
'';
paths = [ "${dataDir}/backup" ];
};
systemd.tmpfiles.rules = [ "d ${dataDir}/backup 700 paperless paperless -" ];
users.users.paperless.extraGroups = [ "redis-paperless" ];
myConfig.resticBackup.paperless = {
enable = true;
user = config.users.users.paperless.name;
extraConfig = {
backupPrepareCommand = ''
${dataDir}/paperless-manage document_exporter ${dataDir}/backup ${
lib.concatStringsSep " " [
"--compare-checksums"
"--delete"
"--split-manifest"
"--use-filename-format"
"--no-progress-bar"
]
}
'';
paths = [ "${dataDir}/backup" ];
};
};
environment.systemPackages = [
(pkgs.writeShellApplication {
name = "paperless-restore";