alejandro-angulo/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Configure restic repo for nextcloud data
All checks were successful
Gitea Actions Demo / Explore-Gitea-Actions (push) Successful in 11s
Details

Browse source
This commit is contained in:
alejandro-angulo 2024-12-01 17:03:26 -08:00
parent 997d1b2f9e
commit 6c08146fd2
Signed by: alejandro-angulo
GPG key ID: 75579581C74554B6
5 changed files with 64 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

52
modules/nixos/services/nextcloud/default.nix
View file

@ -5,6 +5,16 @@
...
}: let
cfg = config.aa.services.nextcloud;
secrets = config.age.secrets;
mkNextcloudSecret = attrs: {
name = attrs.name;
value = {
file = attrs.path;
owner = "nextcloud";
group = "nextcloud";
};
};
in {
options.aa.services.nextcloud = with lib; {
enable = mkEnableOption "nextcloud";
@ -19,11 +29,24 @@ in {
};
config = lib.mkIf cfg.enable {
age.secrets.nextcloud_admin = {
file = ../../../../secrets/nextcloud_admin.age;
owner = "nextcloud";
group = "nextcloud";
};
age.secrets = builtins.listToAttrs (builtins.map (attrs: mkNextcloudSecret attrs) [
{
name = "restic/password";
path = ../../../../secrets/nextcloud_restic_password.age;
}
{
name = "restic/env";
path = ../../../../secrets/nextcloud_restic_env.age;
}
{
name = "restic/repo";
path = ../../../../secrets/nextcloud_restic_repo.age;
}
{
name = "nextcloud_admin";
path = ../../../../secrets/nextcloud_admin.age;
}
]);
services.nextcloud = {
enable = true;
@ -47,7 +70,7 @@ in {
config = {
dbtype = "pgsql";
adminuser = "alejandro";
adminpassFile = config.age.secrets.nextcloud_admin.path;
adminpassFile = secrets.nextcloud_admin.path;
};
};
@ -57,6 +80,23 @@ in {
useACMEHost = cfg.acmeCertName;
};
services.restic.backups = {
nextcloud = {
user = "nextcloud";
initialize = true;
paths = [config.services.nextcloud.datadir];
environmentFile = secrets."restic/env".path;
repositoryFile = secrets."restic/repo".path;
passwordFile = secrets."restic/password".path;
timerConfig = {
OnCalendar = "00:05";
Persistent = true;
RandomizedDelaySec = "5h";
};
pruneOpts = ["--keep-daily 7" "--keep-weekly 5" "--keep-monthly 12" "--keep-yearly 9001"];
};
};
networking.firewall.allowedTCPPorts = [80 443];
};
}