SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 21:01:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Modularize the backup configuration

Browse source
This commit is contained in:
SebastianStork 2024-09-09 00:16:32 +02:00
parent e333333914
commit 40a8ba846a
4 changed files with 101 additions and 88 deletions
Download patch file Download diff file Expand all files Collapse all files

5
hosts/stratus/containers/default.nix
View file

@ -66,10 +66,7 @@ in
...
}:
{
imports = [
"${self}/modules/system/sops.nix"
"${self}/modules/system/tailscale.nix"
];
imports = [ self.nixosModules.default ];
system = {
inherit stateVersion;

33
hosts/stratus/containers/nextcloud/backup.nix
View file

@ -6,37 +6,13 @@
...
}:
{
sops.secrets = {
"restic/environment" = {
owner = config.users.users.nextcloud.name;
inherit (config.users.users.nextcloud) group;
};
"restic/password" = {
owner = config.users.users.nextcloud.name;
inherit (config.users.users.nextcloud) group;
};
};
systemd.tmpfiles.rules = [ "d ${dataDir}/backup 700 nextcloud nextcloud -" ];
systemd.tmpfiles.rules = [
"d ${dataDir}/backup 700 nextcloud nextcloud -"
"d /var/cache/restic-backups-nextcloud 700 nextcloud nextcloud -"
];
services.restic.backups.nextcloud = {
initialize = true;
myConfig.resticBackup.nextcloud = {
enable = true;
user = config.users.users.nextcloud.name;
repository = "s3:https://s3.eu-central-003.backblazeb2.com/stork-atlas/nextcloud";
environmentFile = config.sops.secrets."restic/environment".path;
passwordFile = config.sops.secrets."restic/password".path;
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 5"
"--keep-monthly 6"
"--keep-yearly 1"
];
extraConfig = {
backupPrepareCommand = ''
${lib.getExe' config.services.nextcloud.occ "nextcloud-occ"} maintenance:mode --on
${lib.getExe' config.services.postgresql.package "pg_dump"} nextcloud --format=custom --file=${dataDir}/backup/db.dump
@ -50,6 +26,7 @@
"${dataDir}/backup"
];
};
};
environment.systemPackages = [
(pkgs.writeShellApplication {

36
hosts/stratus/containers/paperless/backup.nix
View file

@ -6,37 +6,15 @@
...
}:
{
sops.secrets = {
"restic/environment" = {
owner = config.users.users.paperless.name;
inherit (config.users.users.paperless) group;
};
"restic/password" = {
owner = config.users.users.paperless.name;
inherit (config.users.users.paperless) group;
};
};
systemd.tmpfiles.rules = [ "d ${dataDir}/backup 700 paperless paperless -" ];
systemd.tmpfiles.rules = [
"d ${dataDir}/backup 700 paperless paperless -"
"d /var/cache/restic-backups-paperless 700 paperless paperless -"
];
users.users.paperless.extraGroups = [ "redis-paperless" ];
services.restic.backups.paperless = {
initialize = true;
inherit (config.services.paperless) user;
repository = "s3:https://s3.eu-central-003.backblazeb2.com/stork-atlas/paperless";
environmentFile = config.sops.secrets."restic/environment".path;
passwordFile = config.sops.secrets."restic/password".path;
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 5"
"--keep-monthly 6"
"--keep-yearly 1"
];
myConfig.resticBackup.paperless = {
enable = true;
user = config.users.users.paperless.name;
extraConfig = {
backupPrepareCommand = ''
${dataDir}/paperless-manage document_exporter ${dataDir}/backup ${
lib.concatStringsSep " " [
@ -50,8 +28,8 @@
'';
paths = [ "${dataDir}/backup" ];
};
};
users.users.paperless.extraGroups = [ "redis-paperless" ];
environment.systemPackages = [
(pkgs.writeShellApplication {
name = "paperless-restore";

61
modules/system/restic-backup.nix Normal file
View file

@ -0,0 +1,61 @@
{ config, lib, ... }:
let
cfg = lib.filterAttrs (_: value: value.enable) config.myConfig.resticBackup;
in
{
options.myConfig.resticBackup = lib.mkOption {
type = lib.types.attrsOf (
lib.types.submodule {
options = {
enable = lib.mkEnableOption "";
user = lib.mkOption {
type = lib.types.str;
default = config.users.users.root.name;
};
extraConfig = lib.mkOption {
type = lib.types.attrsOf lib.types.anything;
default = { };
};
};
}
);
default = { };
};
config = lib.mkIf (cfg != { }) {
systemd.tmpfiles.rules = lib.mapAttrsToList (
name: value: "d /var/cache/restic-backups-${name} 700 ${value.user} ${value.user} -"
) cfg;
users.groups.restic.members = lib.mapAttrsToList (_: value: value.user) cfg;
sops.secrets = {
"restic/environment" = {
mode = "440";
group = config.users.groups.restic.name;
};
"restic/password" = {
mode = "440";
group = config.users.groups.restic.name;
};
};
services.restic.backups = lib.mapAttrs (
name: value:
{
inherit (value) user;
initialize = true;
repository = "s3:https://s3.eu-central-003.backblazeb2.com/stork-atlas/${name}";
environmentFile = config.sops.secrets."restic/environment".path;
passwordFile = config.sops.secrets."restic/password".path;
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 5"
"--keep-monthly 6"
"--keep-yearly 1"
];
}
// value.extraConfig
) cfg;
};
}