consolidated options

2026-07-01 00:19:17 -05:00
parent 43fe37d4e2
commit b13b774738
2 changed files with 69 additions and 16 deletions
@@ -16,7 +16,7 @@ in
      nixos.mtls
      nixos.janus-ca
      nixos.forgejo
-      # nixos.restic-server
+      nixos.restic-server
      # nixos.restic-envoy
      ({ config, pkgs, ... }: {
        networking.hostName = hostname;
@@ -58,17 +58,15 @@ in
          port = 443;
        };

-        networking.firewall.allowedTCPPorts = [ 8000 ];
-        services.restic.server = {
+        resticServer = {
          enable = true;
+          dataDir = "/mnt/restic";
          privateRepos = true;
          listenAddress = "0.0.0.0:8000";
-          extraFlags = [
-            "--no-auth"
-            "--tls"
-            "--tls-cert=${config.mtls.certFile}"
-            "--tls-key=${config.mtls.keyFile}"
-          ];
+          tls = {
+            certFile = config.mtls.certFile;
+            keyFile = config.mtls.keyFile;
+          };
        };

        loginText.extraServiceStatus = {