65 lines
1.4 KiB
Nix
65 lines
1.4 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
|
|
let cfg = config.my.services.borg-backup;
|
|
in {
|
|
options.my.services.borg-backup = {
|
|
enable = mkEnableOption "Enable Borg backups for this host";
|
|
|
|
repo = mkOption {
|
|
type = types.str;
|
|
default = null;
|
|
example = "deadbeef@deadbeef.repo.borgbase.com:repo";
|
|
description = "Borgbase repo info. Required.";
|
|
};
|
|
|
|
paths = mkOption {
|
|
type = types.listOf types.str;
|
|
default = [];
|
|
example = [
|
|
"/var/lib"
|
|
"/home"
|
|
];
|
|
description = "Paths to backup";
|
|
};
|
|
|
|
exclude = mkOption {
|
|
type = types.listOf types.str;
|
|
default = [];
|
|
example = [
|
|
# very large paths
|
|
"/var/lib/docker"
|
|
"/var/lib/systemd"
|
|
"/var/lib/libvirt"
|
|
|
|
# temporary files created by cargo and `go build`
|
|
"**/target"
|
|
"/home/*/go/bin"
|
|
"/home/*/go/pkg"
|
|
];
|
|
description = "Paths to exclude from backup";
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
services.borgbackup.jobs."borgbase" = {
|
|
paths = cfg.paths;
|
|
exclude = cfg.exclude;
|
|
repo = cfg.repo;
|
|
encryption = {
|
|
mode = "repokey-blake2";
|
|
passCommand = "cat /root/borgbackup/passphrase";
|
|
};
|
|
environment.BORG_RSH = "ssh -i /root/borgbackup/ssh_key";
|
|
compression = "auto,zstd";
|
|
startAt = "daily";
|
|
prune.keep = {
|
|
daily = 7;
|
|
weekly = 4;
|
|
monthly = 6;
|
|
};
|
|
};
|
|
};
|
|
}
|