qenya/nixfiles
1
0
Fork 0
Code Issues 4 Pull requests Activity Actions

backup: hoist variable definitions, add source to target's knownHosts

Browse source
This commit is contained in:
Katherina Walshe-Grey 2025-03-04 18:12:44 +00:00
parent fefc7bd20d
commit 373bd88e1b
1 changed files with 38 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

28
flake/backup.nix
View file

@ -1,6 +1,7 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
let let
cfg = config.fountain.backup; cfg = config.fountain.backup;
keys = import ../keys.nix;
syncOptions = { syncOptions = {
dataset = lib.mkOption { dataset = lib.mkOption {
@ -91,34 +92,45 @@ in
# TODO: add some assertions to verify the options # TODO: add some assertions to verify the options
config.flake.colmena = lib.mkMerge (lib.mapAttrsToList config.flake.colmena = lib.mkMerge (lib.mapAttrsToList
(name: sync: { (name: sync:
${sync.sourceHost} = { pkgs, ... }: { let
randomcat.services.zfs.datasets."${sync.source}/${sync.dataset}".zfsPermissions.users.backup = [ "hold" "send" ]; inherit (sync) dataset sourceHost targetHost source target;
# TODO: don't want to have to dig into the node config for the fqdn
sourceFqdn = config.flake.nixosConfigurations.${sourceHost}.config.networking.fqdn;
in
{
${sourceHost} = { pkgs, ... }: {
randomcat.services.zfs.datasets."${source}/${dataset}".zfsPermissions.users.backup = [ "hold" "send" ];
users.users.backup = { users.users.backup = {
group = "backup"; group = "backup";
isSystemUser = true; isSystemUser = true;
useDefaultShell = true; useDefaultShell = true;
openssh.authorizedKeys.keys = cfg.keys.${sync.targetHost}; openssh.authorizedKeys.keys = cfg.keys.${targetHost};
packages = with pkgs; [ mbuffer lzop ]; # syncoid uses these if available but doesn't pull them in automatically packages = with pkgs; [ mbuffer lzop ]; # syncoid uses these if available but doesn't pull them in automatically
}; };
users.groups.backup = { }; users.groups.backup = { };
}; };
${sync.targetHost} = { ${targetHost} = {
randomcat.services.zfs.datasets."${sync.target}".zfsPermissions.users.syncoid = [ "mount" "create" "receive" "recordsize" ]; randomcat.services.zfs.datasets.${target}.zfsPermissions.users.syncoid = [ "mount" "create" "receive" "recordsize" ];
services.syncoid = { services.syncoid = {
enable = true; enable = true;
interval = "*-*-* *:15:00"; interval = "*-*-* *:15:00";
commonArgs = [ "--no-sync-snap" ]; commonArgs = [ "--no-sync-snap" ];
commands = { commands = {
${name} = { ${name} = {
source = "backup@${config.flake.nixosConfigurations.${sync.sourceHost}.config.networking.fqdn}:${sync.source}/${sync.dataset}"; source = "backup@${sourceFqdn}:${source}/${dataset}";
target = "${sync.target}/${sync.dataset}"; target = "${target}/${dataset}";
recursive = true; recursive = true;
recvOptions = "ux recordsize o compression=lz4"; recvOptions = "ux recordsize o compression=lz4";
}; };
}; };
}; };
# TODO: this should be handled by a networking module
programs.ssh.knownHosts.${sourceFqdn}.publicKey = keys.machines.${sourceHost};
}; };
}) })
cfg.sync cfg.sync