feat(servers): add automatic backups using restic.

modules/servers/baldur/crafty-controller.nix

@@ -38,4 +38,9 @@
       entrypoints = "websecure";
     };
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/crafty-controller"];
+    server.paths = ["/var/lib/crafty-controller"];
+  };
 }

modules/servers/bragi/audiobookshelf.nix

@@ -19,4 +19,9 @@
       entrypoints = "websecure";
     };
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/audiobookshelf"];
+    server.paths = ["/var/lib/audiobookshelf"];
+  };
 }

modules/servers/bragi/navidrome.nix

@@ -24,4 +24,9 @@
       entrypoints = "websecure";
     };
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/navidrome"];
+    server.paths = ["/var/lib/navidrome"];
+  };
 }

modules/servers/freyja/immich.nix

@@ -24,4 +24,16 @@
       entrypoints = "websecure";
     };
   };
+
+  services.postgresqlBackup = {
+    enable = true;
+    databases = [
+      "immich"
+    ];
+  };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/immich" "/var/backup/postgresql"];
+    server.paths = ["/var/lib/immich" "/var/backup/postgresql"];
+  };
 }

modules/servers/general/restic.nix

@@ -27,8 +27,8 @@ in {
     server = {
       initialize = true;
       passwordFile = config.age.secrets.restic-server-pass.path;
-      repositoryFile = config.age.secrets.restic-server-pass.path;
+      repositoryFile = config.age.secrets.restic-server-repo.path;
-      environmentFile = config.age.secrets.restic-server-pass.path;
+      environmentFile = config.age.secrets.restic-server-env.path;
       paths = opts.paths;
       pruneOpts = opts.pruneOpts;
       checkOpts = opts.checkOpts;

modules/servers/heimdall/beszel-hub.nix

@@ -44,4 +44,9 @@
       entrypoints = "websecure";
     };
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/beszel"];
+    server.paths = ["/var/lib/beszel"];
+  };
 }

modules/servers/odin/miniflux.nix

@@ -25,4 +25,14 @@
       entrypoints = "websecure";
     };
   };
+
+  services.postgresqlBackup = {
+    enable = true;
+    databases = ["miniflux"];
+  };
+
+  services.restic.backups = {
+    local.paths = ["/var/backup/postgresql"];
+    server.paths = ["/var/backup/postgresql"];
+  };
 }

modules/servers/odin/syncyomi.nix

@@ -26,4 +26,9 @@
       entrypoints = "websecure";
     };
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/syncyomi"];
+    server.paths = ["/var/lib/syncyomi"];
+  };
 }

modules/servers/odin/upfast.nix

@@ -54,4 +54,9 @@
       entrypoints = "websecure";
     };
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/upfast"];
+    server.paths = ["/var/lib/upfast"];
+  };
 }

modules/servers/odin/wallabag.nix

@@ -30,4 +30,9 @@
       entrypoints = "websecure";
     };
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/wallabag"];
+    server.paths = ["/var/lib/wallabag"];
+  };
 }

modules/servers/thor/changedetection-io.nix

@@ -22,4 +22,9 @@
       entrypoints = "websecure";
     };
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/changedetection-io"];
+    server.paths = ["/var/lib/changedetection-io"];
+  };
 }

modules/servers/thor/forgejo.nix

@@ -38,4 +38,9 @@
       AllowUsers = ["forgejo"];
     };
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/forgejo"];
+    server.paths = ["/var/lib/forgejo"];
+  };
 }

modules/servers/thor/lemmy.nix

@@ -15,4 +15,9 @@
       entrypoints = "websecure";
     };
   };
+
+  services.restic.backups = {
+    local.paths = ["/var/lib/lemmy"];
+    server.paths = ["/var/lib/lemmy"];
+  };
 }