wo2w/nixos-config
1
0
Fork 0
Code Issues Pull requests Activity

drone: add restic rest server

Browse source
This commit is contained in:
wo2wz 2025-11-22 22:33:43 -05:00
parent 3899927ced
commit 49a5d29b0a
4 changed files with 40 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/nixos/services/homeserver/restic/backups.nix
View file

@ -1,7 +1,10 @@
{ config, pkgs, lib, ... }:
{
sops.secrets."restic/password" = {};
sops.secrets = {
"restic/password" = {};
"restic/rest-auth.env" = {};
};
systemd.services = {
db-backup = {
@ -49,7 +52,8 @@
'';
initialize = true;
repository = "/mnt/external/backup/restic";
repository = "rest:http://localhost:8001/drone";
environmentFile = config.sops.secrets."restic/rest-auth.env".path;
passwordFile = config.sops.secrets."restic/password".path;
timerConfig = {
OnCalendar = "03:00";

1
modules/nixos/services/homeserver/restic/default.nix
View file

@ -3,5 +3,6 @@
{
imports = [
./backups.nix
./rest-server.nix
];
}

28
modules/nixos/services/homeserver/restic/rest-server.nix Normal file
View file

@ -0,0 +1,28 @@
{ config, ... }:
{
sops.secrets."restic/rest-server/.htpasswd" = {
owner = "restic";
group = "restic";
};
services.caddy.virtualHosts."restic.taild5f7e6.ts.net".extraConfig =
assert config.services.caddy.enable;
''
import default-settings
bind tailscale/restic
reverse_proxy localhost:8001
'';
services.restic.server = {
enable = true;
dataDir = "/mnt/external/backup/restic";
listenAddress = "127.0.0.1:8001";
htpasswd-file = config.sops.secrets."restic/rest-server/.htpasswd".path;
privateRepos = true;
appendOnly = true;
};
}