From 2e7fefa7b9de8c98e31b7168a517d47d13ebd814 Mon Sep 17 00:00:00 2001
From: jasmine <its.jassy@pm.me>
Date: Tue, 15 Oct 2024 06:46:10 +0800
Subject: [PATCH] migrate backups to borgbase

---
 ...5ad1a114007e5c55aa2871fe105-borgbackup.age |   8 +++
 nixos/viridian/hardware-configuration.nix     |  10 +---
 .../viridian/services/borgbackup/default.nix  |  56 +++++++++---------
 .../services/borgbackup/passphrase.age        | Bin 0 -> 366 bytes
 4 files changed, 37 insertions(+), 37 deletions(-)
 create mode 100644 nixos/common/global/secrets/rekeyed/viridian/baf095ad1a114007e5c55aa2871fe105-borgbackup.age
 create mode 100644 nixos/viridian/services/borgbackup/passphrase.age

diff --git a/nixos/common/global/secrets/rekeyed/viridian/baf095ad1a114007e5c55aa2871fe105-borgbackup.age b/nixos/common/global/secrets/rekeyed/viridian/baf095ad1a114007e5c55aa2871fe105-borgbackup.age
new file mode 100644
index 0000000..96cec22
--- /dev/null
+++ b/nixos/common/global/secrets/rekeyed/viridian/baf095ad1a114007e5c55aa2871fe105-borgbackup.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 KTkZog 5sg/hpf/62ScHhTff9oK26rKUHOOIOkaEvz6azRbIFs
+8YDQXQULAwfzazasdUqr+DhBMm0p4957vywLCmbsPOQ
+-> ^)fem:-grease ,C tq3PQ#"
+Dp5AeElkIQ9RTy0qPV91kur2jWvk2uJTgSRqk1gwoM8vUJM/BbpdqsimUCI0PFxG
+Dd507GmCEWDrmovhpAIBS1lAqlY
+--- +Xft4rCt53z0qwZsydGBaUanbAxv06yRHgJeDw6yUAI
+<�B�98�@_�h8c>�$K�ǂK@<�a�F(�ؾ�������=��e�-;��L���R�=;M��83�>�j�]l�f�
����NV*��jm��Cm��"ށ��D��nTw�ܟ[����
\ No newline at end of file
diff --git a/nixos/viridian/hardware-configuration.nix b/nixos/viridian/hardware-configuration.nix
index 8f59566..e30e398 100644
--- a/nixos/viridian/hardware-configuration.nix
+++ b/nixos/viridian/hardware-configuration.nix
@@ -3,9 +3,7 @@
   lib,
   pkgs,
   ...
-}: let
-  hostname = config.networking.hostName;
-in {
+}: {
   imports = [
     # Our ephemeral system. Wipe root on reboot.
     ../common/optional/ephemeral-btrfs.nix
@@ -71,12 +69,6 @@ in {
     options = ["subvol=services" "compress=zstd"];
   };
 
-  fileSystems."/srv/backup" = {
-    device = "/dev/disk/by-label/data";
-    fsType = "btrfs";
-    options = ["subvol=backup" "compress=zstd"];
-  };
-
   fileSystems."/srv/shares" = {
     device = "/dev/disk/by-label/data";
     fsType = "btrfs";
diff --git a/nixos/viridian/services/borgbackup/default.nix b/nixos/viridian/services/borgbackup/default.nix
index d2a226f..142feae 100644
--- a/nixos/viridian/services/borgbackup/default.nix
+++ b/nixos/viridian/services/borgbackup/default.nix
@@ -1,33 +1,33 @@
-{...}: {
-  services.borgbackup.jobs = {
-    containers = {
-      paths = [
-        "/srv/containers"
-      ];
-      encryption.mode = "none";
-      repo = "/srv/backup/containers";
-      compression = "auto,zstd";
-      startAt = "daily";
-    };
+{config, ...}: {
+  age.secrets.borgbackup = {
+    rekeyFile = ./passphrase.age;
+  };
 
-    services = {
-      paths = [
-        "/srv/services"
-      ];
-      encryption.mode = "none";
-      repo = "/srv/backup/services";
-      compression = "auto,zstd";
-      startAt = "daily";
-    };
+  services.borgbackup.jobs."borgbase" = {
+    paths = [
+      # Shares
+      "/srv/shares/sajenim"
+      # Services
+      "/srv/services/forgejo"
+      "/srv/services/immich"
+      "/srv/services/minecraft"
+      "/srv/services/paperless-ngx"
+      # Containers
+      "/srv/containers/jellyfin"
+      "/srv/containers/lidarr"
+      "/srv/containers/prowlarr"
+      "/srv/containers/qbittorrent"
+      "/srv/containers/radarr"
+      "/srv/containers/sonarr"
+    ];
 
-    shares = {
-      paths = [
-        "/srv/shares"
-      ];
-      encryption.mode = "none";
-      repo = "/srv/backup/shares";
-      compression = "auto,zstd";
-      startAt = "daily";
+    repo = "o93k24r6@o93k24r6.repo.borgbase.com:repo";
+    encryption = {
+      mode = "repokey-blake2";
+      passCommand = "cat ${config.age.secrets.traefik.path}";
     };
+    environment.BORG_RSH = "ssh -i /etc/ssh/ssh_host_ed25519_key";
+    compression = "auto,lzma";
+    startAt = "daily";
   };
 }
diff --git a/nixos/viridian/services/borgbackup/passphrase.age b/nixos/viridian/services/borgbackup/passphrase.age
new file mode 100644
index 0000000000000000000000000000000000000000..91f3acb2ea1d168fe37c8abc955bdc4d3dc51fc0
GIT binary patch
literal 366
zcmV-!0g?V;XJsvAZewzJaCB*JZZ2<fXD@a!3N1b$aA|fea56PEAZTP$Zbx?@L2Ot|
zD{MhzGB!_4Wkqc?W-m^6c3E&vYhyESXmmG6NLE5wa7IH;F;s463RpCGRCQTnVpudm
zFl0A%Ff%etT2p3PX+%<0b}~n3PIoseV?t3dL~u?)3N1b$B~N@PIY2%qEoX9NVRK~)
zXlgcBOKoB_Y-co9GD&)Dac?kIPEKJkPD@l(aWQFbS#~%IEiEk|OK>(yIbl_KF+^!r
zH84nKQDJ6QY<eqVIcY&cD=RlENJ=$tD|9n+NJB{qAVPJ60x_bN#!j6EpnoVBWG9!x
zRcDBh>D3VpRUdASFFP%XiYUtOLm^&eankN?e`L){oVx}f@)#}s@1V=Z`;<;h3JlOC
zx&X?~;?jI#(CP5n{_&ims+}a>Cm)uTbA1XF^zx?hF&Ir0^L>eudKU+LgSFsl<_6A0
M><@Om>)P%c-OUz?;s5{u

literal 0
HcmV?d00001