feat(desktop): add systemwide flatpak and enable polkit.

This commit is contained in:
CronyAkatsuki 2025-06-22 22:01:42 +02:00
parent 9b707cd3d2
commit 095e45e435
9 changed files with 128 additions and 1 deletions

View file

@ -9,5 +9,6 @@
./root.nix
./beszel-agent.nix
./optimise-storage.nix
./restic.nix
];
}

View file

@ -0,0 +1,37 @@
{config, ...}: let
opts = {
paths = [
"/var/lib/private"
];
pruneOpts = [
"--keep-last 10"
"--keep-daily 7"
"--keep-weekly 5"
"--keep-monthly 12"
];
checkOpts = [
"--read-data-subset=10%"
"--with-cache"
];
};
in {
services.restic.backups = {
local = {
initialize = true;
passwordFile = config.age.secrets.restic-server-local-pass.path;
repository = "/var/lib/backup";
paths = opts.paths;
pruneOpts = opts.pruneOpts;
checkOpts = opts.checkOpts;
};
server = {
initialize = true;
passwordFile = config.age.secrets.restic-server-pass.path;
repositoryFile = config.age.secrets.restic-server-pass.path;
environmentFile = config.age.secrets.restic-server-pass.path;
paths = opts.paths;
pruneOpts = opts.pruneOpts;
checkOpts = opts.checkOpts;
};
};
}

View file

@ -11,6 +11,18 @@
root-passwd = {
file = ../../../secrets/root-passwd.age;
};
restic-server-local-pass = {
file = ../../../secrets/restic-server-local-pass.age;
};
restic-server-pass = {
file = ../../../secrets/restic-server-pass.age;
};
restic-server-repo = {
file = ../../../secrets/restic-server-repo.age;
};
restic-server-env = {
file = ../../../secrets/restic-server-env.age;
};
};
};
}