orm, elucredassa: prototype backups for actual

hosts/elucredassa/default.nix

@@ -23,6 +23,29 @@ in
   console.keyMap = "uk";
   services.xserver.xkb.layout = "gb";
 
+  # TODO: modularise this
+  randomcat.services.zfs.datasets = {
+    "rpool_elucredassa/backups" = {
+      mountpoint = "none";
+      zfsPermissions.users.syncoid = [ "mount" "create" "receive" "recordsize" ];
+    };
+    "rpool_elucredassa/backups/rpool_orm" = { mountpoint = "none"; };
+  };
+  services.syncoid = {
+    enable = true;
+    interval = "*-*-* *:15:00";
+    commonArgs = [ "--no-sync-snap" ];
+    commands = {
+      "testing1" = {
+        source = "backup@10.127.1.2:rpool_orm/state";
+        target = "rpool_elucredassa/backups/rpool_orm/state";
+        recursive = true;
+        recvOptions = "ux recordsize o compression=lz4";
+        extraArgs = [ "--debug" ];
+      };
+    };
+  };
+
   qenya.services.distributed-builds = {
     enable = true;
     keyFile = "/etc/ssh/ssh_host_ed25519_key";

hosts/orm/default.nix

@@ -31,6 +31,24 @@
     recursive = "zfs";
   };
   
+  # TODO: modularise this
+  randomcat.services.zfs.datasets."rpool_orm/state".zfsPermissions.users.backup = [ "hold" "send" ];
+  users.users.backup = {
+    group = "backup";
+    isSystemUser = true;
+    useDefaultShell = true;
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOFa3hjej6KGmS2aQ4s46Y7U8pN4yyR2FuMofpHRwXNk syncoid@elucredassa"
+    ];
+
+    # syncoid uses these if available but doesn't pull them in automatically
+    packages = with pkgs; [
+      pkgs.mbuffer
+      pkgs.lzop
+    ];
+  };
+  users.groups.backup = { };
+
   qenya.services.actual = {
     enable = true;
     domain = "actual.qenya.tel";