{ pkgs, config, ... }: let vars = import ../../vars.nix; arionPath = "/home/${vars.user}/.setup/hosts/franz/arion"; cfg = config.virtualisation.arion; in { # systemd.timers."restic-cron" = { # wantedBy = ["timers.target"]; # timerConfig = { # OnBootSec = "1m"; # OnUnitActiveSec = "1m"; # Unit = "restic-cron.service"; # }; # }; # # systemd.services."restic-cron" = { # path = [ # cfg.docker.client.package # cfg.package # pkgs.nix # pkgs.restic # pkgs.autorestic # ]; # script = '' # source /etc/profile # autorestic -c /home/ghoscht/.autorestic.yml --verbose cron >> /tmp/autorestic.log 2>&1 # ''; # serviceConfig = { # Type = "oneshot"; # User = "root"; # }; # }; services.cron = { enable = true; systemCronJobs = [ "*/5 * * * * root . /etc/profile; autorestic -c /home/ghoscht/.autorestic.yml --ci cron" ]; }; environment.systemPackages = with pkgs; [autorestic restic]; sops.secrets."autorestic/zfs_key" = { owner = vars.user; }; sops.secrets."autorestic/ssd_key" = { owner = vars.user; }; sops.secrets."autorestic/eustachius_key" = { owner = vars.user; }; sops.templates.".autorestic.yml" = { path = "/home/${vars.user}/.autorestic.yml"; owner = vars.user; mode = "0775"; content = '' version: 2 global: forget: keep-weekly: 7 keep-monthly: 12 locations: dashboard: from: /storage/dataset/docker/dashboard to: - zfs cron: '0 4 * * 0' # Every Sunday at 4:00 hooks: before: - arion -f ${arionPath}/dashboard/arion-compose.nix -p ${arionPath}/dashboard/arion-pkgs.nix stop after: - arion -f ${arionPath}/dashboard/arion-compose.nix -p ${arionPath}/dashboard/arion-pkgs.nix start dns: from: /storage/dataset/docker/dns to: - zfs cron: '0 4 * * 0' # Every Sunday at 4:00 hooks: before: - arion -f ${arionPath}/dns/arion-compose.nix -p ${arionPath}/dns/arion-pkgs.nix stop after: - arion -f ${arionPath}/dns/arion-compose.nix -p ${arionPath}/dns/arion-pkgs.nix start feed: from: /storage/dataset/docker/feed to: - zfs cron: '0 4 * * 0' # Every Sunday at 4:00 hooks: before: - arion -f ${arionPath}/feed/arion-compose.nix -p ${arionPath}/feed/arion-pkgs.nix stop after: - arion -f ${arionPath}/feed/arion-compose.nix -p ${arionPath}/feed/arion-pkgs.nix start git: from: /storage/dataset/docker/git to: - zfs - ssd cron: '0 4 * * *' # Every Day at 4:00 hooks: before: - arion -f ${arionPath}/git/arion-compose.nix -p ${arionPath}/git/arion-pkgs.nix stop after: - arion -f ${arionPath}/git/arion-compose.nix -p ${arionPath}/git/arion-pkgs.nix start media: from: /storage/dataset/docker/media to: - zfs cron: '0 4 * * *' # Every Day at 4:00 hooks: before: - arion -f ${arionPath}/media/arion-compose.nix -p ${arionPath}/media/arion-pkgs.nix stop after: - arion -f ${arionPath}/media/arion-compose.nix -p ${arionPath}/media/arion-pkgs.nix start nextcloud: from: /storage/dataset/docker/nextcloud to: - zfs - ssd cron: '0 4 * * *' # Every Day at 4:00 hooks: before: - arion -f ${arionPath}/nextcloud/arion-compose.nix -p ${arionPath}/nextcloud/arion-pkgs.nix stop after: - arion -f ${arionPath}/nextcloud/arion-compose.nix -p ${arionPath}/nextcloud/arion-pkgs.nix start smarthome: from: /storage/dataset/docker/smarthome to: - zfs cron: '0 4 * * 0' # Every Sunday at 4:00 hooks: before: - arion -f ${arionPath}/smarthome/arion-compose.nix -p ${arionPath}/smarthome/arion-pkgs.nix stop after: - arion -f ${arionPath}/smarthome/arion-compose.nix -p ${arionPath}/smarthome/arion-pkgs.nix start passwords: from: /storage/dataset/docker/passwords to: - zfs - ssd cron: '0 4 * * *' # Every Day at 4:00 hooks: before: - arion -f ${arionPath}/passwords/arion-compose.nix -p ${arionPath}/passwords/arion-pkgs.nix stop after: - arion -f ${arionPath}/passwords/arion-compose.nix -p ${arionPath}/passwords/arion-pkgs.nix start matrix: from: /storage/dataset/docker/matrix to: - zfs cron: '0 4 * * 0' # Every Sunday at 4:00 backends: zfs: type: local path: /storage/dataset/backups key: '${config.sops.placeholder."autorestic/zfs_key"}' ssd: type: local path: /home/ghoscht/Backups key: '${config.sops.placeholder."autorestic/ssd_key"}' eustachius: type: sftp path: ghoscht@100.64.0.3:/mnt/Backups key: '${config.sops.placeholder."autorestic/eustachius_key"}' ''; }; }