fra1-a: backup e11sync

flake.nix

@@ -224,6 +224,7 @@
             {
               age.secrets = {
                 zfs-passphrase-vno1-oh2.file = ./secrets/vno1-oh2/zfs-passphrase.age;
+                borgbackup-password.file = ./secrets/fra1-a/borgbackup-password.age;
                 e11sync-secret-key.file = ./secrets/e11sync/secret-key.age;
                 motiejus-passwd-hash.file = ./secrets/motiejus_passwd_hash.age;
                 root-passwd-hash.file = ./secrets/root_passwd_hash.age;

hosts/fra1-a/configuration.nix

@@ -36,10 +36,30 @@
         root.hashedPasswordFile = config.age.secrets.root-passwd-hash.path;
         motiejus.hashedPasswordFile = config.age.secrets.motiejus-passwd-hash.path;
       };
+
       unitstatus = {
         enable = true;
         email = "motiejus+alerts@jakstys.lt";
       };
+
+      snapshot = {
+        enable = true;
+        mountpoints = ["/var/lib"];
+      };
+
+      zfsborg = {
+        enable = true;
+        passwordPath = config.age.secrets.borgbackup-password.path;
+        sshKeyPath = "/etc/ssh/ssh_host_ed25519_key";
+        dirs = [
+          {
+            mountpoint = "/var/lib";
+            repo = "zh2769@zh2769.rsync.net:${config.networking.hostName}.${config.networking.domain}-var_lib";
+            paths = ["private/e11sync-backend"];
+            backup_at = "*-*-* 01:00:00 UTC";
+          }
+        ];
+      };
     };
 
     services = {

secrets.nix

@@ -37,6 +37,7 @@ in
   ]
   // mk ([fra1-a] ++ motiejus) [
     "secrets/vno1-oh2/zfs-passphrase.age"
+    "secrets/fra1-a/borgbackup-password.age"
     "secrets/e11sync/secret-key.age"
   ]
   // mk ([vno3-rp3b] ++ motiejus) [

secrets/fra1-a/borgbackup-password.age

@@ -0,0 +1,13 @@
+age-encryption.org/v1
+-> ssh-ed25519 qDkIVA 4eWKaOEipqD+wBm6LmkoK859W0rxuqOlHRhl1rqg214
+6iAPFM9dodI0DQH/mBMty6vYRYnj6d/VXd8JNBISSUk
+-> X25519 FQDerBkjJCkdAIOtC0Id6ICpyYHKvMZ7OJ81clYNJV4
+y9xXAiQnUGAuj2iUjenA198npAWkXoucn9e1DZgk7jw
+-> X25519 5B40eKXvnhKs2e4cAZVsWUmT6VnfWncsBHe8hqQ1N34
+Bu8cltpUTA8qwKXMs/+oHpA8dWpV39WBWr5Wjf3Dyxo
+-> piv-p256 +y2G/w A7itUCaM5PqCyjJTam00/My8kiNPLfqxAGx2AtfL/WjZ
+Q8hoFEsPFezWn5EIujJZmEeLCUkYb/v2l6ZZvweRris
+-> piv-p256 jNqd3A A/ujG5oTDZhsUlT6UPvVH189ea1YMsac2x67A04ZX20M
+QsgHXAIeUWZtTlzG6AKTBvjvgDPXIZUInGIA95jWmHg
+--- QNizHaPQcAJYZQSbbzSSLOF8Cxj/DlZsUkCO2kRsVtI
+Ré²ûûãÞ!äÇÅO¢ZĈðÖŸÏ„¿¸j(Eúˆ^®lh´ìQ
uõvélápž$