nix-config/hosts/common/optional/restic.nix
Lander Van den Bulcke fc668627ee
feat: add restic
Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>
2025-01-14 08:38:29 +01:00

40 lines
822 B
Nix

{ pkgs, config, ... }:
{
sops.secrets.restic-environment = {
owner = "root";
group = "root";
sopsFile = ./secrets.yaml;
};
sops.secrets.restic-password = {
owner = "root";
group = "root";
sopsFile = ./secrets.yaml;
};
sops.secrets.restic-repository = {
owner = "root";
group = "root";
sopsFile = ./secrets.yaml;
};
services.restic.backups = {
daily = {
initialize = true;
repositoryFile = config.sops.secrets.restic-repository.path;
passwordFile = config.sops.secrets.restic-password.path;
environmentFile = config.sops.secrets.restic-environment.path;
paths = [
config.users.users.lander.home
];
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 5"
"--keep-weekly 12"
];
};
};
}