lightly-toasted/nix-config
1
0
Fork 0
mirror of https://github.com/lightly-toasted/nix-config.git synced 2026-01-31 12:40:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: migrate backup destination to dedicated rest-server

Browse source 
- Migrate restic backup destination on nixos and vps to y2q rest-server
- Split host-specific restic env secrets
This commit is contained in:
toast 2026-01-17 21:02:27 +09:00
parent 3c314ad5bd
commit efd61adc07
3 changed files with 23 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

47
hosts/vps/modules/services/restic.nix
View file

@ -1,51 +1,32 @@
{ config, ... }:
let
paths = [
"/var/lib/zipline"
"/var/lib/postgresql"
"/var/lib/forgejo"
"/var/lib/trilium"
"/var/lib/bitwarden_rs"
];
in {
{
sops.secrets = {
"restic/password" = {};
"restic/env" = {};
"restic/rclone-config" = {};
"restic/env/vps" = {};
};
services.restic.backups.b2 = {
services.restic.backups.y2q = {
initialize = true;
inhibitsSleep = true;
passwordFile = config.sops.secrets."restic/password".path;
paths = paths;
repository = "s3:https://s3.us-east-005.backblazeb2.com/restic-backups-vps";
environmentFile = config.sops.secrets."restic/env".path;
paths = [
"/var/lib/zipline"
"/var/lib/postgresql"
"/var/lib/forgejo"
"/var/lib/trilium"
"/var/lib/bitwarden_rs"
];
repository = "rest:http://restic.ts.700457.xyz/vps/";
environmentFile = config.sops.secrets."restic/env/vps".path;
pruneOpts = [
"--keep-hourly 3"
"--keep-daily 7"
"--keep-weekly 3"
"--keep-monthly 3"
];
timerConfig = {
OnCalendar = "daily";
Persistent = true;
};
};
services.restic.backups.nextcloud = {
initialize = true;
inhibitsSleep = true;
passwordFile = config.sops.secrets."restic/password".path;
paths = paths;
repository = "rclone:nextcloud:restic/vps";
rcloneConfigFile = config.sops.secrets."restic/rclone-config".path;
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 4"
"--keep-monthly 6"
];
timerConfig = {
OnCalendar = "daily";
OnCalendar = "hourly";
Persistent = true;
};
};