nullbite/nixfiles
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nullbox: make restic backups atomic for minecraft server

Browse Source
This commit is contained in:
NullBite 2024-08-06 23:03:15 -04:00
parent 758c40155b
commit 48659b6f64
Signed by: nullbite
GPG Key ID: 6C4D545385D4925A
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
hosts/nullbox/backup.nix
View File

@ -1,12 +1,41 @@
{ config, lib, pkgs, ... }:
let
inherit (lib) escapeShellArg;
secret = name: config.age.secrets."${name}".path;
fs = config.fileSystems."/srv/mcserver";
in
{
config = {
age.secrets.restic-rclone.file = ../../secrets/restic-rclone.age;
age.secrets.restic-password.file = ../../secrets/restic-password.age;
systemd.services.restic-backups-system = {
path = with pkgs; [ btrfs-progs ];
# ensures mounts are isolated to only this service
serviceConfig.PrivateMounts = true;
};
services.restic.backups.system = {
# create an atomic backup
backupPrepareCommand = ''
set -Eeuxo pipefail
mkdir -p /tmp/btrfs_root
mount -t btrfs -o subvol=/ ${escapeShellArg fs.device} /tmp/btrfs_root
if btrfs subvol delete /tmp/btrfs_root/@restic-snapshot-mcserver; then
echo "Old restic snapshot deleted.";
fi
btrfs subvol snapshot -r /srv/mcserver /tmp/btrfs_root/@restic-snapshot-mcserver
umount /srv/mcserver
mount -t btrfs -o subvol=/@restic-snapshot-mcserver ${escapeShellArg fs.device} /srv/mcserver
'';
backupCleanupCommand = ''
btrfs subvolume delete /tmp/btrfs_root/@restic-snapshot-mcserver
'';
rcloneConfigFile = secret "restic-rclone";
passwordFile = secret "restic-password";
repository = "rclone:restic:";