23 lines
549 B
Nix
23 lines
549 B
Nix
|
{
|
||
|
|
self,
|
||
|
|
config,
|
||
|
|
...
|
||
|
|
}: let
|
||
|
|
backupSchedules = import "${self}/data/backupSchedules.nix";
|
||
|
|
inherit (config.services.secrets) secrets;
|
||
|
|
in {
|
||
|
|
services.restic.backups.vault = {
|
||
|
|
user = "root";
|
||
|
|
paths = [
|
||
|
|
"/var/lib/vault"
|
||
|
|
"/var/lib/private/step-ca"
|
||
|
|
];
|
||
|
|
timerConfig = backupSchedules.restic.high;
|
||
|
|
|
||
|
|
repository = "s3:s3.eu-central-003.backblazeb2.com/Chaos-Backups/Restic/Vault";
|
||
|
|
passwordFile = "${secrets.restic_password.path}";
|
||
|
|
environmentFile = "${secrets.restic_env.path}";
|
||
|
|
createWrapper = true;
|
||
|
|
};
|
||
|
|
}
|