59 lines
1.8 KiB
Nix
59 lines
1.8 KiB
Nix
{
|
|
self,
|
|
pkgs,
|
|
config,
|
|
...
|
|
}: let
|
|
inherit (config.services.secrets) secrets;
|
|
backupSchedules = import "${self}/data/backupSchedules.nix";
|
|
|
|
repoRoot = "s3:s3.eu-central-003.backblazeb2.com/Chaos-Backups/Restic";
|
|
in {
|
|
services.restic.backups = {
|
|
social = {
|
|
user = "root";
|
|
paths = [
|
|
"/var/lib/gotosocial"
|
|
];
|
|
|
|
repository = "${repoRoot}/Social-02";
|
|
environmentFile = "${secrets.restic_backups_env.path}";
|
|
passwordFile = "${secrets.restic_social_password.path}";
|
|
createWrapper = true;
|
|
|
|
pruneOpts = ["--keep-last 10"];
|
|
timerConfig = backupSchedules.restic.medium;
|
|
|
|
backupPrepareCommand = let
|
|
# Because gotosocial-admin isn't a seporate package we need to generate a seperate config
|
|
# and duplicate the wrapper for use in a systemd unit
|
|
gotoSocialConfigFile = (pkgs.formats.yaml {}).generate "config.yml" config.services.gotosocial.settings;
|
|
gotoSocialAdmin = "${(pkgs.writeShellScriptBin "gts-admin" ''
|
|
exec systemd-run \
|
|
-u gotosocial-admin.service \
|
|
-p Group=gotosocial \
|
|
-p User=gotosocial \
|
|
-q -t -G --wait --service-type=exec \
|
|
${pkgs.gotosocial}/bin/gotosocial --config-path ${gotoSocialConfigFile} admin "$@"
|
|
'')}/bin/gts-admin";
|
|
in "${
|
|
(pkgs.writeShellScriptBin "backupPrepareCommand" ''
|
|
systemctl stop gotosocial
|
|
|
|
${gotoSocialAdmin} export --path /var/lib/gotosocial/gts-export.json
|
|
|
|
${gotoSocialAdmin} media prune all --dry-run=false
|
|
|
|
systemctl start gotosocial
|
|
'')
|
|
}/bin/backupPrepareCommand";
|
|
|
|
backupCleanupCommand = "${
|
|
(pkgs.writeShellScriptBin "backupCleanupCommand" ''
|
|
rm /var/lib/gotosocial/gts-export.json || true
|
|
'')
|
|
}/bin/backupCleanupCommand";
|
|
};
|
|
};
|
|
}
|