randogoth/bucur
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added forgejo to backup

Browse source
This commit is contained in:
randogoth 2026-07-23 12:26:49 +02:00
parent 37f98eee1b
commit 71f9f585de
1 changed files with 25 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

22
modules/services/backup.nix
View file

@ -3,11 +3,14 @@ let
nostrDb = "/var/lib/nostr-rs-relay/nostr.db";
jiroriDb = "/var/lib/jirorian/jirorian.db";
oberonDb = "/var/lib/oberon/oberon.db";
forgejoDb = "/var/lib/forgejo/data/forgejo.db";
dumpDir = "/tmp/borg-dumps";
in
{
sops.secrets.borg_ssh_key = { mode = "0400"; };
sops.secrets.borg_passphrase = {};
sops.secrets.borg_ssh_key = {
mode = "0400";
};
sops.secrets.borg_passphrase = { };
services.borgbackup.jobs.databases = {
repo = "ssh://snh7mkwh@snh7mkwh.repo.borgbase.com/./repo";
@ -18,6 +21,15 @@ in
"/var/lib/tor/fingerprint-ed25519"
"/var/lib/tor/hashed-fingerprint"
"/var/lib/tailscale"
"/var/lib/forgejo/repositories"
"/var/lib/forgejo/data"
"/var/lib/forgejo/custom"
];
exclude = [
"/var/lib/forgejo/data/forgejo.db" # live DB; use the consistent dump
"/var/lib/forgejo/data/tmp"
"/var/lib/forgejo/data/queues"
];
encryption = {
@ -25,18 +37,18 @@ in
passCommand = "cat ${config.sops.secrets.borg_passphrase.path}";
};
environment.BORG_RSH =
"ssh -i ${config.sops.secrets.borg_ssh_key.path} -o StrictHostKeyChecking=accept-new";
environment.BORG_RSH = "ssh -i ${config.sops.secrets.borg_ssh_key.path} -o StrictHostKeyChecking=accept-new";
preHook = ''
mkdir -p ${dumpDir}
${pkgs.sqlite}/bin/sqlite3 ${nostrDb} ".backup '${dumpDir}/nostr.db'"
${pkgs.sqlite}/bin/sqlite3 ${jiroriDb} ".backup '${dumpDir}/jirorian.db'"
${pkgs.sqlite}/bin/sqlite3 ${oberonDb} ".backup '${dumpDir}/oberon.db'"
${pkgs.sqlite}/bin/sqlite3 ${forgejoDb} ".backup '${dumpDir}/forgejo.db'"
'';
postHook = ''
rm -f ${dumpDir}/nostr.db ${dumpDir}/jirorian.db ${dumpDir}/oberon.db
rm -f ${dumpDir}/nostr.db ${dumpDir}/jirorian.db ${dumpDir}/oberon.db ${dumpDir}/forgejo.db
'';
startAt = "daily";