rice/programs/borg.nix
2024-05-20 12:06:15 +02:00

48 lines
1.1 KiB
Nix

{
config,
pkgs,
...
}: let
host = "11967@prio.ch-s011.rsync.net";
in {
age.secrets.borgpassword.file = ../secrets/borgpassword.age;
services.borgbackup = {
jobs.backup = {
paths = ["/persist"];
repo = "${host}:${config.networking.hostName}";
encryption = {
mode = "repokey";
passCommand = "cat ${config.age.secrets.borgpassword.path}";
};
startAt = "daily";
persistentTimer = true;
environment.BORG_RSH = "ssh -i /home/buffet/.ssh/id_borg";
extraArgs = "--remote-path borg1";
prune.keep = {
within = "1d";
daily = 7;
weekly = 4;
monthly = -1;
};
};
};
systemd.services = {
borgbackup-job-backup = {
after = ["ensure-online.service"];
requires = ["ensure-online.service"];
};
ensure-online = {
description = "waiting for Network";
after = ["network-online.target"];
requires = ["network-online.target"];
serviceConfig = {
ExecStart = "${pkgs.networkmanager}/bin/nm-online -q --timeout=300";
Type = "oneshot";
};
};
};
}