feat(tyr): setup restic backup.

flake.nix

@@ -304,6 +304,7 @@
           ./hosts/tyr/configuration.nix
           ./modules/linux/nixos
           ./modules/servers/tyr
+          ./modules/servers/general/restic.nix
           home-manager.nixosModules.home-manager
           {
             home-manager.useGlobalPkgs = true;

modules/servers/tyr/secrets.nix

@@ -7,6 +7,18 @@
       duckdns = {
         file = ../../../secrets/duckdns.age;
       };
+      restic-server-local-pass = {
+        file = ../../../secrets/restic-server-local-pass.age;
+      };
+      restic-server-pass = {
+        file = ../../../secrets/restic-server-pass.age;
+      };
+      restic-server-repo = {
+        file = ../../../secrets/restic-server-repo.age;
+      };
+      restic-server-env = {
+        file = ../../../secrets/restic-server-env.age;
+      };
     };
   };
 }

modules/servers/tyr/syncthing.nix

@@ -8,4 +8,9 @@
   networking.firewall = {
     allowedTCPPorts = [8384];
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/syncthing"];
+    server.paths = ["/var/lib/syncthing"];
+  };
 }

modules/servers/tyr/wallos.nix

@@ -14,4 +14,9 @@
   networking.firewall = {
     allowedTCPPorts = [8282];
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/wallos"];
+    server.paths = ["/var/lib/wallos"];
+  };
 }