nolan/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Get Restic backups working.

Browse source
This commit is contained in:
Nolan Darilek 2025-04-18 19:38:24 -05:00
parent db901f2bf5
commit 56ca8bd17a
1 changed files with 27 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

48
roles/restic.nix
View file

@ -1,32 +1,38 @@
{ config, pkgs, ... }:
{
services.restic.backups.home = {
paths = [ "/home/.zfs/snapshot/restic" ];
services.restic.backups.system = {
paths = [
"/home/.zfs/snapshot/restic"
"/var/.zfs/snapshot/restic"
];
repository = "s3:s3.us-west-001.backblazeb2.com/nolans-nixos-backups/${config.networking.hostName}";
environmentFile = config.age.secrets."restic_b2_${config.networking.hostName}".path;
passwordFile = config.age.secrets."restic_password_${config.networking.hostName}".path;
initialize = true;
backupPrepareCommand = "${pkgs.zfs}/bin/zfs snapshot zpool/home@restic";
backupCleanupCommand = "${pkgs.zfs}/bin/zfs destroy zpool/home@restic";
timerConfig = {
OnCalendar = "hourly";
Persistent = true;
};
};
services.restic.backups.var = {
paths = [ "/var/.zfs/snapshot/restic" ];
repository = "s3:s3.us-west-001.backblazeb2.com/nolans-nixos-backups/${config.networking.hostName}";
environmentFile = config.age.secrets."restic_b2_${config.networking.hostName}".path;
passwordFile = config.age.secrets."restic_password_${config.networking.hostName}".path;
initialize = true;
backupPrepareCommand = "${pkgs.zfs}/bin/zfs snapshot zpool/var@restic";
backupCleanupCommand = "${pkgs.zfs}/bin/zfs destroy zpool/var@restic";
timerConfig = {
OnCalendar = "hourly";
Persistent = true;
};
backupPrepareCommand = ''
#!${pkgs.bash}/bin/sh
${pkgs.zfs}/bin/zfs snapshot zpool/home@restic
${pkgs.zfs}/bin/zfs snapshot zpool/var@restic
'';
backupCleanupCommand = ''
#!${pkgs.bash}/bin/sh
${pkgs.zfs}/bin/zfs destroy zpool/home@restic
${pkgs.zfs}/bin/zfs destroy zpool/var@restic
'';
timerConfig.OnCalendar = "hourly";
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 5"
"--keep-monthly 12"
"--keep-yearly 2"
];
};
systemd.tmpfiles.rules = [
"d /mnt/restic 0700 root root"
];
age.secrets."restic_b2_${config.networking.hostName}".file =
../secrets/restic_b2_${config.networking.hostName}.age;
age.secrets."restic_password_${config.networking.hostName}".file =