31 lines
770 B
Nix
31 lines
770 B
Nix
|
{
|
||
|
|
config,
|
||
|
|
configVars,
|
||
|
|
...
|
||
|
|
}: let
|
||
|
|
passwordFile = config.sops.secrets."software/restic-passphrase".path;
|
||
|
|
resticServerCredentials = config.sops.secrets."software/restic-server-credentials".path;
|
||
|
|
backupServerIp = configVars.networking.addresses.backup-server.ip;
|
||
|
|
in {
|
||
|
|
sops.secrets = {
|
||
|
|
"software/restic-passphrase" = {};
|
||
|
|
"software/restic-server-credentials" = {};
|
||
|
|
};
|
||
|
|
sops.secrets = {};
|
||
|
|
services.restic.backups = {
|
||
|
|
daily = {
|
||
|
|
initialize = true;
|
||
|
|
passwordFile = passwordFile;
|
||
|
|
paths = [
|
||
|
|
];
|
||
|
|
repository = "rest:http://${backupServerIp}:8000/";
|
||
|
|
environmentFile = "${resticServerCredentials}";
|
||
|
|
pruneOpts = [
|
||
|
|
"--keep-daily 7"
|
||
|
|
"--keep-weekly 5"
|
||
|
|
"--keep-monthly 12"
|
||
|
|
];
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|