changing to real restic service

This commit is contained in:
John Lancaster
2026-03-15 23:08:24 -05:00
parent 621dda40eb
commit 3f743280ee
4 changed files with 150 additions and 20 deletions

View File

@@ -22,6 +22,7 @@ in
desktop
step-ssh-user
mtls
restic
];
targets.genericLinux.enable = true;
@@ -33,7 +34,7 @@ in
home.packages = with pkgs; [
nixos-rebuild
(writeShellScriptBin "test-push" ''
nixos-rebuild switch --flake ${flakeDir}#janus --target-host root@${testTarget}
nixos-rebuild switch --flake ${flakeDir}#soteria --target-host root@${testTarget}
'')
];
@@ -76,26 +77,35 @@ in
};
};
sops.secrets."restic_password/john_ubuntu" = {
path = "${config.xdg.configHome}/resticprofile/password.txt";
path = "${config.xdg.configHome}/restic/password.txt";
mode = "0400";
};
programs.resticprofile = {
enable= true;
profiles = {
default = {
"inherit" = "base";
repository = "rest:https://soteria.john-stream.com/john-ubuntu";
cacert = "${CACert}";
tls-client-cert = "${mtlsBundle}";
backup = {
source = [
"${config.xdg.userDirs.documents}"
"/conf"
];
schedule = "*-*-* *:15,30,45:00";
};
};
};
restic = {
passwordFile = "${config.xdg.configHome}/restic/password.txt";
paths = [
"${config.xdg.userDirs.documents}"
"/conf"
];
};
# programs.resticprofile = {
# enable= true;
# profiles = {
# default = {
# "inherit" = "base";
# repository = "rest:https://soteria.john-stream.com/john-ubuntu";
# cacert = "${CACert}";
# tls-client-cert = "${mtlsBundle}";
# backup = {
# source = [
# "${config.xdg.userDirs.documents}"
# "/conf"
# ];
# schedule = "*-*-* *:15,30,45:00";
# };
# };
# };
# };
};
flake.homeConfigurations."${hostname}" = inputs.home-manager.lib.homeManagerConfiguration {