noah/dotfiles
1
0
Fork 0
mirror of https://github.com/nmasur/dotfiles synced 2025-01-30 22:12:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

backup paperless and adjust restic bucket

Browse Source
This commit is contained in:
Noah Masur 2025-01-14 04:25:37 +00:00
parent d31a083ed6
commit 0f7c15bf36
No known key found for this signature in database
3 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/swan/default.nix
View File

@ -134,7 +134,7 @@ inputs.nixpkgs.lib.nixosSystem rec {
endpoint = "s3.us-west-002.backblazeb2.com"; endpoint = "s3.us-west-002.backblazeb2.com";
bucket = "noahmasur-backup"; bucket = "noahmasur-backup";
accessKeyId = "0026b0e73b2e2c80000000005"; accessKeyId = "0026b0e73b2e2c80000000005";
glacierBucket = "noahmasur-archive"; resticBucket = "noahmasur-restic";
}; };
# Disable passwords, only use SSH key # Disable passwords, only use SSH key

8
modules/nixos/services/backups.nix
View File

@ -22,9 +22,9 @@
description = "S3 access key ID for backups"; description = "S3 access key ID for backups";
default = null; default = null;
}; };
glacierBucket = lib.mkOption { resticBucket = lib.mkOption {
type = lib.types.nullOr lib.types.str; type = lib.types.nullOr lib.types.str;
description = "S3 bucket for glacier backups"; description = "S3 bucket for restic backups";
default = null; default = null;
}; };
}; };
@ -84,9 +84,9 @@
dest = "${config.secretsDirectory}/restic"; dest = "${config.secretsDirectory}/restic";
}; };
services.restic.backups = lib.mkIf (config.backup.s3.glacierBucket != null) { services.restic.backups = lib.mkIf (config.backup.s3.resticBucket != null) {
default = { default = {
repository = "s3:s3.us-east-1.amazonaws.com/${config.backup.s3.glacierBucket}/restic"; repository = "s3:s3.us-east-1.amazonaws.com/${config.backup.s3.resticBucket}/restic";
paths = [ ]; paths = [ ];
environmentFile = config.secrets.s3-glacier.dest; environmentFile = config.secrets.s3-glacier.dest;
passwordFile = config.secrets.restic.dest; passwordFile = config.secrets.restic.dest;

4
modules/nixos/services/paperless.nix
View File

@ -57,5 +57,9 @@
systemd.services.paperless-web.serviceConfig.UMask = lib.mkForce "0026"; systemd.services.paperless-web.serviceConfig.UMask = lib.mkForce "0026";
systemd.services.paperless-scheduler.serviceConfig.UMask = lib.mkForce "0026"; systemd.services.paperless-scheduler.serviceConfig.UMask = lib.mkForce "0026";
systemd.services.paperless-task-queue.serviceConfig.UMask = lib.mkForce "0026"; systemd.services.paperless-task-queue.serviceConfig.UMask = lib.mkForce "0026";
# Backups
services.restic.backups.default.paths = [ "/data/generic/paperless/documents" ];
}; };
} }