nixos-config/modules/system/services/forgejo/backups.nix

{
  config,
  pkgs,
  lib,
  ...
}:
let
  user = config.users.users.forgejo.name;
in
{
  options.custom.services.forgejo.backups.enable = lib.mkEnableOption "";

  config = lib.mkIf config.custom.services.forgejo.backups.enable {
    custom.services.resticBackups.forgejo = {
      inherit user;
      suspendService = "forgejo.service";
      extraConfig.paths = [ config.services.forgejo.stateDir ];
    };

    environment.systemPackages = [
      (pkgs.writeShellApplication {
        name = "forgejo-restore";
        text = ''
          sudo --user=${user} bash -c "
            systemctl stop forgejo.service
            restic-forgejo restore latest --target /
            systemctl start forgejo.service
          "
        '';
      })
    ];
  };
}