foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 04:58:01 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

tasks/backup-archive: format and refactor

Browse Source
This commit is contained in:
Gabriel Arazas 2022-09-01 22:47:22 +08:00
parent 33a090a73d
commit 91097f18df
1 changed files with 46 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

83
modules/nixos/tasks/backup-archive/default.nix
View File

@ -36,28 +36,34 @@ let
};
};
in {
in
{
options.tasks.backup-archive.enable =
lib.mkEnableOption "backup setup with BorgBackup";
config = lib.mkIf cfg.enable {
sops.secrets = let
borgSecretsPath = key: "borg-backup/${key}";
getKey = key: {
inherit key;
sopsFile = lib.getSecret "backup-archive.yaml";
name = borgSecretsPath key;
};
getSecrets = keys:
lib.listToAttrs (lib.lists.map (key: lib.nameValuePair (borgSecretsPath key) (getKey key)) keys);
in getSecrets [
"borg-patterns/home"
"borg-patterns/etc"
"borg-patterns/keys"
"borg-patterns/remote-backup"
"ssh-key"
"password"
];
sops.secrets =
let
getKey = key: {
inherit key;
sopsFile = lib.getSecret "backup-archive.yaml";
};
getSecrets = keys:
lib.listToAttrs (lib.lists.map
(key:
lib.nameValuePair
"borg-backup/${key}"
(getKey key))
keys);
in
getSecrets [
"borg-patterns/home"
"borg-patterns/etc"
"borg-patterns/keys"
"borg-patterns/remote-backup"
"ssh-key"
"password"
];
profiles.filesystem = {
archive.enable = true;
@ -65,37 +71,40 @@ in {
};
services.borgbackup.jobs = {
local-archive = borgJobCommonSetting {
patterns = with config.sops; [
secrets."borg-backup/borg-patterns/home".path
secrets."borg-backup/borg-patterns/etc".path
secrets."borg-backup/borg-patterns/keys".path
];
} // {
local-archive = borgJobCommonSetting
{
patterns = with config.sops; [
secrets."borg-backup/borg-patterns/home".path
secrets."borg-backup/borg-patterns/etc".path
secrets."borg-backup/borg-patterns/keys".path
];
} // {
doInit = false;
removableDevice = true;
repo = "/mnt/archives/backups";
startAt = "daily";
};
local-external-drive = borgJobCommonSetting {
patterns = with config.sops; [
secrets."borg-backup/borg-patterns/home".path
secrets."borg-backup/borg-patterns/etc".path
secrets."borg-backup/borg-patterns/keys".path
];
} // {
local-external-drive = borgJobCommonSetting
{
patterns = with config.sops; [
secrets."borg-backup/borg-patterns/home".path
secrets."borg-backup/borg-patterns/etc".path
secrets."borg-backup/borg-patterns/keys".path
];
} // {
doInit = false;
removableDevice = true;
repo = "/mnt/external-storage/backups";
startAt = "daily";
};
remote-borgbase = borgJobCommonSetting {
patterns = with config.sops; [
secrets."borg-backup/borg-patterns/remote-backup".path
];
} // {
remote-borgbase = borgJobCommonSetting
{
patterns = with config.sops; [
secrets."borg-backup/borg-patterns/remote-backup".path
];
} // {
repo = "r6o30viv@r6o30viv.repo.borgbase.com:repo";
startAt = "daily";
environment.BORG_RSH = "ssh -i ${config.sops.secrets."borg-backup/ssh-key".path}";