nixos/roles/restic.nix

34 lines
1.5 KiB
Nix

{ config, pkgs, ... }:
{
services.restic.backups.home = {
paths = [ "/home/.zfs/snapshot/restic" ];
repository = "s3:s3.us-west-001.backblazeb2.com/nolans-nixos-backups/${config.networking.hostName}";
environmentFile = config.age.secrets."restic_b2_${config.networking.hostName}".path;
passwordFile = config.age.secrets."restic_password_${config.networking.hostName}".path;
initialize = true;
backupPrepareCommand = "${pkgs.zfs}/bin/zfs snapshot zpool/home@restic";
backupCleanupCommand = "${pkgs.zfs}/bin/zfs destroy zpool/home@restic";
timerConfig = {
OnCalendar = "hourly";
Persistent = true;
};
};
services.restic.backups.var = {
paths = [ "/var/.zfs/snapshot/restic" ];
repository = "s3:s3.us-west-001.backblazeb2.com/nolans-nixos-backups/${config.networking.hostName}";
environmentFile = config.age.secrets."restic_b2_${config.networking.hostName}".path;
passwordFile = config.age.secrets."restic_password_${config.networking.hostName}".path;
initialize = true;
backupPrepareCommand = "${pkgs.zfs}/bin/zfs snapshot zpool/var@restic";
backupCleanupCommand = "${pkgs.zfs}/bin/zfs destroy zpool/var@restic";
timerConfig = {
OnCalendar = "hourly";
Persistent = true;
};
};
age.secrets."restic_b2_${config.networking.hostName}".file =
../secrets/restic_b2_${config.networking.hostName}.age;
age.secrets."restic_password_${config.networking.hostName}".file =
../secrets/restic_password_${config.networking.hostName}.age;
}