75 lines
2.2 KiB
Nix
75 lines
2.2 KiB
Nix
# To restore something use something like
|
|
# restic-sisko restore <snapshot_id> --include /persist/var/lib/hass --target /
|
|
# To get snaphots run restic-sisko snapshots
|
|
{
|
|
config,
|
|
pkgs,
|
|
lib,
|
|
...
|
|
}:
|
|
let
|
|
user = "u382036-sub1";
|
|
host = "u382036.your-storagebox.de";
|
|
port = "23";
|
|
in
|
|
{
|
|
age.secrets = {
|
|
HETZNER_STORAGE_BOX_SISKO_SSH_PASSWORD = {
|
|
file = ../../secrets/hetzner-storage-box-sisko-ssh-password.age;
|
|
owner = "root";
|
|
};
|
|
SISKO_RESTIC_PASSWORD = {
|
|
file = ../../secrets/sisko-restic-password.age;
|
|
owner = "root";
|
|
};
|
|
};
|
|
|
|
services.openssh.knownHosts."${host}".publicKey =
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIICf9svRenC/PLKIL9nk6K/pxQgoiFC41wTNvoIncOxs";
|
|
|
|
services.postgresqlBackup = {
|
|
enable = true;
|
|
backupAll = true;
|
|
location = "/var/backup/postgresql";
|
|
};
|
|
|
|
environment.persistence."/persist".directories = [
|
|
config.services.postgresqlBackup.location
|
|
];
|
|
|
|
services.restic.backups.sisko = {
|
|
paths = [
|
|
"/persist"
|
|
"/mnt/hd/immich"
|
|
"/mnt/hd/paperless"
|
|
];
|
|
exclude = [ " /persist/var/lib/containers" ];
|
|
passwordFile = config.age.secrets.SISKO_RESTIC_PASSWORD.path;
|
|
extraOptions = [
|
|
"sftp.command='${lib.getExe pkgs.sshpass} -f ${config.age.secrets.HETZNER_STORAGE_BOX_SISKO_SSH_PASSWORD.path} ssh -p${port} ${user}@${host} -s sftp'"
|
|
];
|
|
repository = "sftp://${user}@${host}:${port}/";
|
|
initialize = true;
|
|
pruneOpts = [
|
|
"--keep-yearly 1"
|
|
"--keep-monthly 2"
|
|
"--keep-daily 7"
|
|
];
|
|
timerConfig.OnCalendar = "daily";
|
|
timerConfig.RandomizedDelaySec = "1h";
|
|
backupPrepareCommand = ''
|
|
${pkgs.systemd}/bin/systemctl stop podman-*
|
|
${pkgs.systemd}/bin/systemctl stop syncthing
|
|
${pkgs.systemd}/bin/systemctl stop paperless-*
|
|
${pkgs.systemd}/bin/systemctl stop forgejo
|
|
${pkgs.systemd}/bin/systemctl stop home-assistant
|
|
'';
|
|
backupCleanupCommand = ''
|
|
${pkgs.systemd}/bin/systemctl start --no-block --all "podman-*"
|
|
${pkgs.systemd}/bin/systemctl start syncthing
|
|
${pkgs.systemd}/bin/systemctl start --no-block --all "paperless-*"
|
|
${pkgs.systemd}/bin/systemctl start forgejo
|
|
${pkgs.systemd}/bin/systemctl start home-assistant
|
|
'';
|
|
};
|
|
}
|