Harald Hoyer
56f9f1c0ae
Ensure proper service execution by adding mount dependencies to systemd services. This guarantees that required file systems are available before the services start.
82 lines
2.1 KiB
Nix
82 lines
2.1 KiB
Nix
{ pkgs
|
|
, lib
|
|
, config
|
|
, ...
|
|
}:
|
|
let
|
|
backup_new_path = "/mnt/raid/backup/hoyer/new/";
|
|
restic_repo = "/mnt/backup/restic-repo";
|
|
in
|
|
{
|
|
systemd.services."restic-backups-hoyer_new".requires = [ "mnt-raid.mount" ];
|
|
services.restic.backups.hoyer_new = {
|
|
repository = restic_repo;
|
|
passwordFile = config.sops.secrets.backup-pw.path;
|
|
timerConfig = {
|
|
OnCalendar = "daily";
|
|
FixedRandomDelay = true;
|
|
RandomizedDelaySec = "4h";
|
|
Persistent = true;
|
|
};
|
|
paths = [ backup_new_path ];
|
|
pruneOpts = [
|
|
"-g host,paths"
|
|
"--keep-daily 7"
|
|
"--keep-weekly 4"
|
|
"--keep-monthly 3"
|
|
"--keep-yearly 1"
|
|
];
|
|
backupPrepareCommand = ''
|
|
HOME=/root ${pkgs.rsync}/bin/rsync -e "${pkgs.openssh}/bin/ssh" --exclude-from /root/excludelist --no-specials --no-devices --numeric-ids --delete-after --partial -axz backup@mx.surfsite.org:/{etc,var,home,root} ${backup_new_path}
|
|
'';
|
|
};
|
|
|
|
systemd.services."restic-backups-self".requires = [ "mnt-backup.mount" ];
|
|
services.restic.backups.self = {
|
|
repository = restic_repo;
|
|
#repository = "s3:nas2a6e8f.myqnapcloud.com:8081/backup";
|
|
passwordFile = config.sops.secrets.backup-pw.path;
|
|
timerConfig = {
|
|
OnCalendar = "daily";
|
|
FixedRandomDelay = true;
|
|
RandomizedDelaySec = "4h";
|
|
Persistent = true;
|
|
};
|
|
paths = [
|
|
"/etc"
|
|
"/var"
|
|
"/home"
|
|
"/root"
|
|
"/persist"
|
|
config.services.samba.settings.Qmultimedia.path
|
|
];
|
|
extraBackupArgs =
|
|
let
|
|
ignorePatterns = [
|
|
"/mnt/raid/backup"
|
|
"/mnt/backup"
|
|
"/mnt/snap"
|
|
"/var/cache"
|
|
"/home/*/.local/share/Trash"
|
|
"/home/*/.cache"
|
|
"/home/*/Downloads"
|
|
"/home/*/.npm"
|
|
"/home/*/.local/share/containers"
|
|
".cache"
|
|
".tmp"
|
|
".log"
|
|
".Trash"
|
|
];
|
|
ignoreFile = builtins.toFile "ignore" (lib.foldl (a: b: a + "\n" + b) "" ignorePatterns);
|
|
in
|
|
[ "--exclude-file=${ignoreFile}" ];
|
|
pruneOpts = [
|
|
"-g host,paths"
|
|
"--keep-daily 7"
|
|
"--keep-weekly 4"
|
|
"--keep-monthly 3"
|
|
"--keep-yearly 1"
|
|
];
|
|
};
|
|
}
|