added forgejo to backup

modules/services/backup.nix

@@ -3,10 +3,13 @@ let
   nostrDb = "/var/lib/nostr-rs-relay/nostr.db";
   jiroriDb = "/var/lib/jirorian/jirorian.db";
   oberonDb = "/var/lib/oberon/oberon.db";
+  forgejoDb = "/var/lib/forgejo/data/forgejo.db";
   dumpDir = "/tmp/borg-dumps";
 in
 {
-  sops.secrets.borg_ssh_key    = { mode = "0400"; };
+  sops.secrets.borg_ssh_key = {
+    mode = "0400";
+  };
   sops.secrets.borg_passphrase = { };
 
   services.borgbackup.jobs.databases = {
@@ -18,6 +21,15 @@ in
       "/var/lib/tor/fingerprint-ed25519"
       "/var/lib/tor/hashed-fingerprint"
       "/var/lib/tailscale"
+      "/var/lib/forgejo/repositories"
+      "/var/lib/forgejo/data"
+      "/var/lib/forgejo/custom"
+    ];
+
+    exclude = [
+      "/var/lib/forgejo/data/forgejo.db" # live DB; use the consistent dump
+      "/var/lib/forgejo/data/tmp"
+      "/var/lib/forgejo/data/queues"
     ];
 
     encryption = {
@@ -25,18 +37,18 @@ in
       passCommand = "cat ${config.sops.secrets.borg_passphrase.path}";
     };
 
-    environment.BORG_RSH =
+    environment.BORG_RSH = "ssh -i ${config.sops.secrets.borg_ssh_key.path} -o StrictHostKeyChecking=accept-new";
-      "ssh -i ${config.sops.secrets.borg_ssh_key.path} -o StrictHostKeyChecking=accept-new";
 
     preHook = ''
       mkdir -p ${dumpDir}
       ${pkgs.sqlite}/bin/sqlite3 ${nostrDb}  ".backup '${dumpDir}/nostr.db'"
       ${pkgs.sqlite}/bin/sqlite3 ${jiroriDb} ".backup '${dumpDir}/jirorian.db'"
       ${pkgs.sqlite}/bin/sqlite3 ${oberonDb} ".backup '${dumpDir}/oberon.db'"
+      ${pkgs.sqlite}/bin/sqlite3 ${forgejoDb} ".backup '${dumpDir}/forgejo.db'"
     '';
 
     postHook = ''
-      rm -f ${dumpDir}/nostr.db ${dumpDir}/jirorian.db ${dumpDir}/oberon.db
+      rm -f ${dumpDir}/nostr.db ${dumpDir}/jirorian.db ${dumpDir}/oberon.db ${dumpDir}/forgejo.db
     '';
 
     startAt = "daily";