pingbox backups

modules/backups/pingbox/default.nix

@@ -0,0 +1,58 @@
+{
+  pkgs,
+  config,
+  ...
+}: {
+  age.secrets = {
+    pingbox_backup_s3_creds.file = ../../../secrets/pingbox_backup_s3_creds.age;
+    pingbox_backup_repo_password.file = ../../../secrets/pingbox_backup_repo_password.age;
+  };
+
+  services.restic.backups = {
+    "system" = {
+      initialize = true;
+      passwordFile = config.age.secrets.pingbox_backup_repo_password.path;
+      timerConfig = {
+        OnCalendar = "daily";
+        Persistent = true;
+        RandomizedDelaySec = "15m";
+      };
+      repository = "s3:s3.eu-central-003.backblazeb2.com/pingbox-backup";
+      environmentFile = config.age.secrets.pingbox_backup_s3_creds.path;
+      progressFps = 0.1;
+
+      paths = [
+        "/etc/ssh"
+        "/etc/NetworkManager/system-connections"
+
+        "/home"
+        "/var/backup"
+      ];
+
+      exclude = [
+        "/home/*/.cache"
+        "/home/*/.local/share/Trash"
+        "/var/cache"
+        "/var/tmp"
+
+        "/home/*/.nix-profile"
+        "/home/*/.nix-defexpr"
+
+        "/home/*/.rustup"
+        "/home/*/.cargo/registry"
+        "/home/*/.cargo/git"
+        "/home/*/.npm"
+        "/home/*/.bun"
+        "/home/*/.hex"
+        "/home/*/.go/pkg"
+        "/home/*/.android/avd"
+
+        "/home/*/.steam/root/steamapps"
+        "/home/*/.local/share/Steam/steamapps"
+        "/home/*/.steam/steam/steamapps"
+      ];
+      backupPrepareCommand = ''
+      '';
+    };
+  };
+}

modules/default.nix

@@ -24,6 +24,9 @@
   sidon = {};
 
   pingbox = {
+    imports = [
+      ./backups/pingbox
+    ];
   };
 
   ranni = {