dotfiles/nixos/services/backups.nix

68 lines
1.7 KiB
Nix
Raw Normal View History

{ config, pkgs, lib, ... }: {
options = {
2022-12-21 21:18:03 +00:00
backup.s3 = {
endpoint = lib.mkOption {
2023-01-21 14:29:03 +00:00
type = lib.types.nullOr lib.types.str;
description = "S3 endpoint for backups";
2022-12-21 21:18:03 +00:00
default = null;
};
bucket = lib.mkOption {
2023-01-21 14:29:03 +00:00
type = lib.types.nullOr lib.types.str;
description = "S3 bucket for backups";
2022-12-21 21:18:03 +00:00
default = null;
};
accessKeyId = lib.mkOption {
2023-01-21 14:29:03 +00:00
type = lib.types.nullOr lib.types.str;
description = "S3 access key ID for backups";
2022-12-21 21:18:03 +00:00
default = null;
};
};
};
2023-01-21 14:29:03 +00:00
config = lib.mkIf (config.backup.s3.endpoint != null) {
2022-10-16 03:47:21 +00:00
users.groups.backup = { };
secrets.backup = {
source = ../../private/backup.age;
dest = "${config.secretsDirectory}/backup";
2022-10-16 03:47:21 +00:00
group = "backup";
permissions = "0440";
};
2022-10-16 19:06:56 +00:00
users.users.litestream.extraGroups = [ "backup" ];
services.litestream = {
enable = true;
environmentFile = config.secrets.backup.dest;
};
# Wait for secret to exist
systemd.services.litestream = {
after = [ "backup-secret.service" ];
requires = [ "backup-secret.service" ];
2022-12-22 00:31:25 +00:00
environment.AWS_ACCESS_KEY_ID = config.backup.s3.accessKeyId;
2022-10-16 19:06:56 +00:00
};
# # Backup library to object storage
# services.restic.backups.calibre = {
# user = "calibre-web";
# repository =
2022-12-22 00:31:25 +00:00
# "s3://${config.backup.s3.endpoint}/${config.backup.s3.bucket}/calibre";
# paths = [
# "/var/books"
# "/var/lib/calibre-web/app.db"
# "/var/lib/calibre-web/gdrive.db"
# ];
# initialize = true;
# timerConfig = { OnCalendar = "00:05:00"; };
2022-12-22 00:31:25 +00:00
# environmentFile = backup.s3File;
# };
};
}