mirror of
https://git.gay/xqtc/nixos-config
synced 2024-11-23 04:10:32 +01:00
94 lines
3.7 KiB
Nix
94 lines
3.7 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}: {
|
|
#
|
|
# BACKUP
|
|
# Check via nix-shell -p borgbackup --run "borg info --rsh 'ssh -p 23 -i /home/moe/.ssh/storagebox_nextcloud_data' u410986-sub1@u410986-sub1.your-storagebox.de:nx-data"
|
|
# 0. Add subaccount on storagebox
|
|
# 1. ssh-keygen -t ed25519 -f ~/.ssh/storagebox_nextcloud_data
|
|
# 2. pwgen 128
|
|
# 3. Add private key as secret
|
|
# 4. add passphrase as secret
|
|
# 5. add ssh public key to subaccount on storagebox!
|
|
# ssh -p 23 u410986-sub1@u410986-sub1.your-storagebox.de
|
|
# 6. set permissions
|
|
# .ssh 0700
|
|
# .ssh/authorized_keys 0600
|
|
#
|
|
|
|
# Retrieve via 'ssh-keyscan -p 23 u410986-sub1.your-storagebox.de'
|
|
programs.ssh.knownHosts = {
|
|
"storagebox" = {
|
|
hostNames = [
|
|
"[u410986-sub1.your-storagebox.de]:23"
|
|
"[u410986-sub2.your-storagebox.de]:23"
|
|
];
|
|
publicKey = ''
|
|
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5EB5p/5Hp3hGW1oHok+PIOH9Pbn7cnUiGmUEBrCVjnAw+HrKyN8bYVV0dIGllswYXwkG/+bgiBlE6IVIBAq+JwVWu1Sss3KarHY3OvFJUXZoZyRRg/Gc/+LRCE7lyKpwWQ70dbelGRyyJFH36eNv6ySXoUYtGkwlU5IVaHPApOxe4LHPZa/qhSRbPo2hwoh0orCtgejRebNtW5nlx00DNFgsvn8Svz2cIYLxsPVzKgUxs8Zxsxgn+Q/UvR7uq4AbAhyBMLxv7DjJ1pc7PJocuTno2Rw9uMZi1gkjbnmiOh6TTXIEWbnroyIhwc8555uto9melEUmWNQ+C+PwAK+MPw==
|
|
ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAGK0po6usux4Qv2d8zKZN1dDvbWjxKkGsx7XwFdSUCnF19Q8psHEUWR7C/LtSQ5crU/g+tQVRBtSgoUcE8T+FWp5wBxKvWG2X9gD+s9/4zRmDeSJR77W6gSA/+hpOZoSE+4KgNdnbYSNtbZH/dN74EG7GLb/gcIpbUUzPNXpfKl7mQitw==
|
|
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIICf9svRenC/PLKIL9nk6K/pxQgoiFC41wTNvoIncOxs
|
|
'';
|
|
};
|
|
};
|
|
|
|
services.borgbackup.jobs = {
|
|
nextcloud_data = {
|
|
user = "nextcloud";
|
|
group = "nextcloud";
|
|
paths = ["${config.services.nextcloud.datadir}"];
|
|
preHook = ''
|
|
${config.services.nextcloud.occ}/bin/nextcloud-occ maintenance:mode --on
|
|
'';
|
|
postHook = ''
|
|
${config.services.nextcloud.occ}/bin/nextcloud-occ maintenance:mode --off
|
|
'';
|
|
repo = "u410986-sub1@u410986-sub1.your-storagebox.de:nx-data";
|
|
encryption = {
|
|
mode = "repokey-blake2";
|
|
passCommand = "cat ${config.sops.secrets.backup_nextcloud_data_passphrase.path}";
|
|
};
|
|
environment = {
|
|
BORG_RSH = "ssh -p 23 -i ${config.sops.secrets.backup_nextcloud_data_ssh.path}";
|
|
};
|
|
compression = "auto,lzma";
|
|
startAt = "Mon *-*-* 00:00:00"; # Monday at 00:00; Storagebox does a snapshot Fridays at 00:00
|
|
};
|
|
nextcloud_database = {
|
|
user = "nextcloud";
|
|
group = "nextcloud";
|
|
dumpCommand = pkgs.writeShellScript "builder.sh" ''
|
|
${config.services.postgresql.package}/bin/pg_dump nextcloud -U nextcloud --no-password
|
|
'';
|
|
preHook = ''
|
|
${config.services.nextcloud.occ}/bin/nextcloud-occ maintenance:mode --on
|
|
'';
|
|
postHook = ''
|
|
${config.services.nextcloud.occ}/bin/nextcloud-occ maintenance:mode --off
|
|
'';
|
|
repo = "u410986-sub2@u410986-sub2.your-storagebox.de:nx-db";
|
|
encryption = {
|
|
mode = "repokey-blake2";
|
|
passCommand = "cat ${config.sops.secrets.backup_nextcloud_database_passphrase.path}";
|
|
};
|
|
environment = {
|
|
BORG_RSH = "ssh -p 23 -i ${config.sops.secrets.backup_nextcloud_database_ssh.path}";
|
|
};
|
|
compression = "auto,lzma";
|
|
startAt = "Mon *-*-* 01:00:00"; # Monday at 01:00; Storagebox does a snapshot Fridays at 00:00
|
|
};
|
|
};
|
|
|
|
systemd.services."borgbackup-job-nextcloud_data" = {
|
|
onFailure = ["notify-email@%i.service"];
|
|
onSuccess = ["notify-email@%i.service"];
|
|
};
|
|
|
|
systemd.services."borgbackup-job-nextcloud_database" = {
|
|
onFailure = ["notify-email@%i.service"];
|
|
onSuccess = ["notify-email@%i.service"];
|
|
};
|
|
}
|