diff options
Diffstat (limited to '')
-rw-r--r-- | hosts/by-name/server1/secrets/backuppass.age (renamed from system/secrets/backup/backuppass.age) | 0 | ||||
-rw-r--r-- | hosts/by-name/server1/secrets/backupssh.age (renamed from system/secrets/backup/backupssh.age) | 0 | ||||
-rw-r--r-- | system/secrets/default.nix | 12 | ||||
-rw-r--r-- | system/services/default.nix | 1 | ||||
-rw-r--r-- | system/services/restic/default.nix | 50 |
5 files changed, 0 insertions, 63 deletions
diff --git a/system/secrets/backup/backuppass.age b/hosts/by-name/server1/secrets/backuppass.age index 8ec40a9..8ec40a9 100644 --- a/system/secrets/backup/backuppass.age +++ b/hosts/by-name/server1/secrets/backuppass.age diff --git a/system/secrets/backup/backupssh.age b/hosts/by-name/server1/secrets/backupssh.age index bd7cafa..bd7cafa 100644 --- a/system/secrets/backup/backupssh.age +++ b/hosts/by-name/server1/secrets/backupssh.age diff --git a/system/secrets/default.nix b/system/secrets/default.nix index ab89942..7100eff 100644 --- a/system/secrets/default.nix +++ b/system/secrets/default.nix @@ -7,18 +7,6 @@ owner = "root"; group = "root"; }; - resticpass = { - file = ./backup/backuppass.age; - mode = "0700"; - owner = "root"; - group = "root"; - }; - resticssh = { - file = ./backup/backupssh.age; - mode = "0700"; - owner = "root"; - group = "root"; - }; taskserverCaKey = { file = ./taskserver/ca.age; mode = "700"; diff --git a/system/services/default.nix b/system/services/default.nix index d78ee28..4d3700d 100644 --- a/system/services/default.nix +++ b/system/services/default.nix @@ -3,7 +3,6 @@ ./invidious ./mail ./minecraft - ./restic ./taskserver ]; } diff --git a/system/services/restic/default.nix b/system/services/restic/default.nix deleted file mode 100644 index cfeaca3..0000000 --- a/system/services/restic/default.nix +++ /dev/null @@ -1,50 +0,0 @@ -{ - config, - pkgs, - ... -}: { - services.restic.backups = let - snapshots = "/srv/snapshots"; - boxUser = "u384702-sub2"; - postgresUser = "postgres"; - in { - storagebox = { - initialize = true; - backupPrepareCommand = '' - ${pkgs.sudo}/bin/sudo -u ${postgresUser} ${pkgs.postgresql}/bin/pg_dumpall --clean --if-exists --quote-all-identifiers > /srv/db_backup.sql - - [ -d /srv/snapshots ] || ${pkgs.btrfs-progs}/bin/btrfs subvolume create /srv/snapshots; - [ -d /srv/snapshots/srv ] && ${pkgs.btrfs-progs}/bin/btrfs subvolume delete /srv/snapshots/srv; - ${pkgs.btrfs-progs}/bin/btrfs subvolume snapshot -r /srv /srv/snapshots/srv; - - # dump() { - # # compression: - # # pg_dump -F t -v "$1" | xz -z -9 -e -T0 > "db_$1.tar.xz" - # pg_dump -v "$1" > "db_$1.tar.xz" - # } - # # List all databases, and dump each of them in its own file - # # psql --list --csv | while read -r line; do echo "$line" | grep ','; done | while IFS=, read -r name _; do echo "$name"; done | sed '1d' | while read -r db_name; do dump "$db_name"; done - ''; - paths = [ - snapshots - ]; - exclude = [ - ".snapshots" - "/var/lib/postgresql" # included in the db dump - ]; - extraBackupArgs = [ - "--verbose" # spam log - ]; - passwordFile = config.age.secrets.resticpass.path; - extraOptions = [ - "rclone.program='ssh -p 23 ${boxUser}@${boxUser}.your-storagebox.de -i ${config.age.secrets.resticssh.path}'" - ]; - repository = "rclone: "; # There is only one repository served - timerConfig = { - Requires = "network-online.target"; - OnCalendar = "daily"; - Persistent = true; - }; - }; - }; -} |