mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-10 23:00:39 +02:00
Code Activity

chore: format everything

Browse source
This commit is contained in:
oddlama 2024-11-26 13:34:55 +01:00
parent deca311c68
commit 7ccd7856ee
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
162 changed files with 4750 additions and 3718 deletions
Download patch file Download diff file Expand all files Collapse all files

72
modules/backups.nix
View file

@ -3,9 +3,9 @@
globals,
lib,
...
}: let
inherit
(lib)
}:
let
inherit (lib)
attrValues
flip
mkIf
@ -13,46 +13,51 @@
mkOption
types
;
in {
in
{
options.backups.storageBoxes = mkOption {
description = "Backups to Hetzner Storage Boxes using restic";
default = {};
type = types.attrsOf (types.submodule (submod: {
options = {
name = mkOption {
description = "The name of the storage box to backup to. The box must be defined in the globals. Defaults to the attribute name.";
default = submod.config._module.args.name;
type = types.str;
};
default = { };
type = types.attrsOf (
types.submodule (submod: {
options = {
name = mkOption {
description = "The name of the storage box to backup to. The box must be defined in the globals. Defaults to the attribute name.";
default = submod.config._module.args.name;
type = types.str;
};
subuser = mkOption {
description = "The name of the storage box subuser as defined in the globals, mapping this user to a subuser id.";
type = types.str;
};
subuser = mkOption {
description = "The name of the storage box subuser as defined in the globals, mapping this user to a subuser id.";
type = types.str;
};
paths = mkOption {
description = "The paths to backup.";
type = types.listOf types.path;
paths = mkOption {
description = "The paths to backup.";
type = types.listOf types.path;
};
};
};
}));
})
);
};
config = mkIf (config.backups.storageBoxes != {}) {
config = mkIf (config.backups.storageBoxes != { }) {
age.secrets.restic-encryption-password.generator.script = "alnum";
age.secrets.restic-ssh-privkey.generator.script = "ssh-ed25519";
services.restic.backups = mkMerge (flip map (attrValues config.backups.storageBoxes)
(boxCfg: {
services.restic.backups = mkMerge (
flip map (attrValues config.backups.storageBoxes) (boxCfg: {
"storage-box-${boxCfg.name}" = {
hetznerStorageBox = let
box = globals.hetzner.storageboxes.${boxCfg.name};
in {
enable = true;
inherit (box) mainUser;
inherit (box.users.${boxCfg.subuser}) subUid path;
sshAgeSecret = "restic-ssh-privkey";
};
hetznerStorageBox =
let
box = globals.hetzner.storageboxes.${boxCfg.name};
in
{
enable = true;
inherit (box) mainUser;
inherit (box.users.${boxCfg.subuser}) subUid path;
sshAgeSecret = "restic-ssh-privkey";
};
# A) We need to backup stuff from other users, so run as root.
# B) We also need to be root because the ssh key will only
@ -76,6 +81,7 @@ in {
# "--keep-yearly 75"
# ];
};
}));
})
);
};
}