36 lines
792 B
Nix
36 lines
792 B
Nix
{ config, pkgs, ... }:
|
|
let
|
|
cfg = config.services.userdata;
|
|
in
|
|
{
|
|
services.restic.backups = {
|
|
options = {
|
|
passwordFile = "/etc/restic/resticPasswd";
|
|
repository = "s3:s3.anazonaws.com/${cfg.backblaze.bucket}";
|
|
initialize = true;
|
|
paths = [
|
|
"/var/dkim"
|
|
"/var/vmail"
|
|
];
|
|
timerConfig = {
|
|
OnCalendar = [ "daily" ];
|
|
};
|
|
user = "restic";
|
|
pruneOpts = [
|
|
"--keep-daily 5"
|
|
];
|
|
};
|
|
};
|
|
users.users.restic = {
|
|
isNormalUser = false;
|
|
isSystemUser = true;
|
|
};
|
|
environment.etc."restic/resticPasswd".text = ''
|
|
${cfg.resticPassword}
|
|
'';
|
|
environment.etc."restic/s3Passwd".text = ''
|
|
AWS_ACCESS_KEY_ID=${cfg.backblaze.accountId}
|
|
AWS_SECRET_ACCESS_KEY=${cfg.backblaze.accountKey}
|
|
'';
|
|
}
|