sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add paperless and radicale backups to hetzner

Browse source
This commit is contained in:
oddlama 2024-01-20 03:02:26 +01:00
parent f9e1247b8a
commit 78ecdd2780
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
12 changed files with 128 additions and 67 deletions
Download patch file Download diff file Expand all files Collapse all files

6
hosts/ward/guests/radicale.nix
View file

@ -82,4 +82,10 @@ in {
};
systemd.services.radicale.serviceConfig.RestartSec = "600"; # Retry every 10 minutes
backups.storageBoxes.dusk = {
subuser = "radicale";
user = "radicale";
paths = ["/var/lib/radicale"];
};
}

32
hosts/ward/guests/vaultwarden.nix
View file

@ -74,7 +74,6 @@ in {
smtpSecurity = "force_tls";
smtpPort = 465;
};
#backupDir = "/data/backup";
environmentFile = config.age.secrets.vaultwarden-env.path;
};
@ -85,36 +84,9 @@ in {
RestartSec = "600"; # Retry every 10 minutes
};
# Backups
# ========================================================================
age.secrets.restic-encryption-password.generator.script = "alnum";
age.secrets.restic-ssh-privkey.generator.script = "ssh-ed25519";
services.restic.backups.main = {
hetznerStorageBox = let
box = config.repo.secrets.global.hetzner.storageboxes.dusk;
in {
enable = true;
inherit (box) mainUser;
inherit (box.users.vaultwarden) subUid path;
sshAgeSecret = "restic-ssh-privkey";
};
backups.storageBoxes.dusk = {
subuser = "vaultwarden";
user = "vaultwarden";
timerConfig = {
OnCalendar = "06:15";
RandomizedDelaySec = "3h";
Persistent = true;
};
initialize = true;
passwordFile = config.age.secrets.restic-encryption-password.path;
paths = [config.services.vaultwarden.backupDir];
pruneOpts = [
"--keep-daily 14"
"--keep-weekly 7"
"--keep-monthly 12"
"--keep-yearly 75"
];
};
}