Get another restic backup channel going for some of our bigger segments of data

This commit is contained in:
TheWanderingCrow 2026-02-11 14:12:47 -05:00
parent 35cc552eb7
commit 6378fb32ba
2 changed files with 25 additions and 13 deletions

8
flake.lock generated
View file

@ -311,11 +311,11 @@
]
},
"locked": {
"lastModified": 1770250185,
"narHash": "sha256-WMjay2VqYKhggxr88arBPLL4Gel89p1yiJx9PKwUQ7g=",
"lastModified": 1770837448,
"narHash": "sha256-P+ZF6MeG7bs0vw+B9BjBbPHgZONakHnpM37dK8XG6LE=",
"ref": "refs/heads/prod",
"rev": "5a3387ddb1e986813b6989af40f566e32ef3991e",
"revCount": 192,
"rev": "6f6f33495aa2aeff3ce30cb79343c6d6dffc63fa",
"revCount": 193,
"type": "git",
"url": "ssh://git@github.com/TheWanderingCrow/nix-secrets"
},

View file

@ -9,8 +9,6 @@ let
paths = [
# Pocket-ID
"/var/lib/pocket-id"
# homebox.nix
"/var/lib/homebox/data"
"/var/lib/forgejo"
"/var/lib/mealie"
@ -26,11 +24,6 @@ let
"/var/lib/tuwunel"
"/var/lib/paperless/export"
# flamesites
"${volumePath}/flamesites/swgalaxyproject"
"${volumePath}/flamesites/nnsbluegrass"
"/home/crow/swgalaxysite/public_html"
"/home/crow/flamebandsite/public_html"
];
};
in
@ -41,13 +34,32 @@ in
}:
{
# Restic secrets
sops.secrets."restic/borg-base/url" = { };
sops.secrets."restic/borg-base/key" = { };
sops.secrets = {
"restic/borg-base/url" = { };
"restic/borg-base/key" = { };
"restic/hetzner-handlerone/url" = { };
"restic/hetzner-handlerone/key" = { };
};
services.restic.backups = {
borg-base = restic-default // {
repositoryFile = config.sops.secrets."restic/borg-base/url".path;
passwordFile = config.sops.secrets."restic/borg-base/key".path;
};
hetzner-handlerone = {
initialize = true;
extraOptions = [
"sftp.args='-i /etc/ssh/ssh_host_ed25519_key -p 23'"
];
repositoryFile = config.sops.secrets."restic/hetzner-handlerone/url".path;
passwordFile = config.sops.secrets."restic/hetzner-handlerone/key".path;
paths = [
"${volumePath}/flamesites/swgalaxyproject"
"${volumePath}/flamesites/nnsbluegrass"
"/home/crow/swgalaxysite/public_html"
"/home/crow/flamebandsite/public_html"
];
}
// restic-default;
};
}