32 lines
737 B
Nix
32 lines
737 B
Nix
|
{
|
||
|
|
config,
|
||
|
|
pkgs,
|
||
|
|
...
|
||
|
|
}: let
|
||
|
|
host = "11967@prio.ch-s011.rsync.net";
|
||
|
|
in {
|
||
|
|
age.secrets.borgpassword.file = ../../secrets/borgpassword.age;
|
||
|
|
|
||
|
|
services.borgbackup = {
|
||
|
|
jobs.backup = {
|
||
|
|
paths = ["/etc" "/home" "/root" "/var"];
|
||
|
|
exclude = ["/var/log"];
|
||
|
|
repo = "${host}:${config.networking.hostName}";
|
||
|
|
encryption = {
|
||
|
|
mode = "repokey";
|
||
|
|
passCommand = "cat ${config.age.secrets.borgpassword.path}";
|
||
|
|
};
|
||
|
|
startAt = "daily";
|
||
|
|
persistentTimer = true;
|
||
|
|
environment.BORG_RSH = "ssh -i /home/buffet/.ssh/id_borg";
|
||
|
|
extraArgs = "--remote-path borg1";
|
||
|
|
prune.keep = {
|
||
|
|
within = "1d";
|
||
|
|
daily = 7;
|
||
|
|
weekly = 4;
|
||
|
|
monthly = -1;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|