fleshed out restic stuff
This commit is contained in:
@@ -2,19 +2,41 @@
|
|||||||
{
|
{
|
||||||
sops.secrets."restic_password" = { };
|
sops.secrets."restic_password" = { };
|
||||||
|
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
restic
|
||||||
|
(pkgs.writeShellScriptBin "restic-backup" "sudo systemctl start restic-backups-localBackup.service")
|
||||||
|
(pkgs.writeShellScriptBin "restic-backup-check" "sudo journalctl -b -u restic-backups-localBackup.service")
|
||||||
|
];
|
||||||
|
|
||||||
|
environment.variables = {
|
||||||
|
RESTIC_REPOSITORY = "/mnt/restic/appdaemon";
|
||||||
|
RESTIC_PASSWORD = "${builtins.readFile config.sops.secrets."restic_password".path}";
|
||||||
|
};
|
||||||
|
|
||||||
services.restic.backups = {
|
services.restic.backups = {
|
||||||
localbackup = {
|
localBackup = {
|
||||||
repository = "/mnt/restic/appdaemon";
|
repository = "/mnt/restic/appdaemon";
|
||||||
passwordFile = config.sops.secrets."restic_password".path;
|
passwordFile = config.sops.secrets."restic_password".path;
|
||||||
initialize = true;
|
initialize = true;
|
||||||
|
timerConfig = {
|
||||||
|
OnCalendar = "03:00";
|
||||||
|
RandomizedDelaySec = "2h";
|
||||||
|
Persistent = true;
|
||||||
|
};
|
||||||
paths = [
|
paths = [
|
||||||
"/home"
|
"/home"
|
||||||
|
"/conf"
|
||||||
|
"/etc/nixos"
|
||||||
];
|
];
|
||||||
exclude = [
|
exclude = [
|
||||||
".cache"
|
".cache"
|
||||||
".vscode-server"
|
".vscode*"
|
||||||
".devenv"
|
".devenv"
|
||||||
".venv"
|
".venv"
|
||||||
|
"build"
|
||||||
|
"dist"
|
||||||
|
"__pycache__"
|
||||||
|
"*.egg-info"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user