infrastructure/modules/nixos/dgn-backups/default.nix
Tom Hubrecht e19100f856
All checks were successful
Check meta / check_dns (pull_request) Successful in 18s
Check meta / check_meta (pull_request) Successful in 18s
Check workflows / check_workflows (pull_request) Successful in 25s
Build all the nodes / ap01 (pull_request) Successful in 59s
Build all the nodes / bridge01 (pull_request) Successful in 1m38s
Build all the nodes / geo01 (pull_request) Successful in 1m41s
Build all the nodes / compute01 (pull_request) Successful in 2m19s
Build all the nodes / geo02 (pull_request) Successful in 1m29s
Build all the nodes / netcore02 (pull_request) Successful in 31s
Build all the nodes / hypervisor01 (pull_request) Successful in 1m28s
Build all the nodes / hypervisor02 (pull_request) Successful in 1m35s
Build all the nodes / hypervisor03 (pull_request) Successful in 1m31s
Build all the nodes / rescue01 (pull_request) Successful in 1m47s
Build all the nodes / storage01 (pull_request) Successful in 1m50s
Build all the nodes / vault01 (pull_request) Successful in 1m47s
Run pre-commit on all files / pre-commit (pull_request) Successful in 35s
Build all the nodes / web01 (pull_request) Successful in 2m16s
Build all the nodes / web02 (pull_request) Successful in 1m36s
Build all the nodes / web03 (pull_request) Successful in 1m53s
Build all the nodes / ap01 (push) Successful in 1m17s
Build all the nodes / geo02 (push) Successful in 1m53s
Build all the nodes / geo01 (push) Successful in 1m56s
Build all the nodes / bridge01 (push) Successful in 2m1s
Build all the nodes / compute01 (push) Successful in 2m30s
Build all the nodes / netcore02 (push) Successful in 30s
Build all the nodes / hypervisor01 (push) Successful in 1m35s
Build all the nodes / hypervisor02 (push) Successful in 1m43s
Build all the nodes / hypervisor03 (push) Successful in 1m42s
Build all the nodes / rescue01 (push) Successful in 2m5s
Build all the nodes / storage01 (push) Successful in 2m8s
Build all the nodes / vault01 (push) Successful in 1m51s
Run pre-commit on all files / pre-commit (push) Successful in 37s
Build all the nodes / web02 (push) Successful in 1m42s
Build all the nodes / web01 (push) Successful in 2m18s
Build all the nodes / web03 (push) Successful in 1m33s
feat(django-apps): Add automatic backup
2024-12-21 08:24:11 +01:00

142 lines
2.8 KiB
Nix

# SPDX-FileCopyrightText: 2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>
#
# SPDX-License-Identifier: EUPL-1.2
{
config,
lib,
dgn-keys,
name,
...
}:
let
inherit (lib)
getExe'
mkEnableOption
mkOption
remove
;
inherit (lib.types)
attrs
attrsOf
listOf
str
submodule
;
cfg = config.dgn-backups;
homes = {
compute01 = "/data/slow/bupstash";
geo01 = "/data/bupstash";
geo02 = "/data/bupstash";
storage01 = "/data/slow/bupstash";
};
starts = {
compute01 = "*-*-* *:38:00";
storage01 = "*-*-* *:21:00";
web01 = "*-*-* *:47:00";
web03 = "*-*-* *:13:00";
};
mkJobs = builtins.mapAttrs (
_:
{ to, settings }:
{
startAt = starts.${name};
key = config.age.secrets."bupstash-put_key".path;
repositoryCommands = lib.extra.mapSingleFuse (
host: "ssh -i /etc/ssh/ssh_host_ed25519_key bupstash-repo@${host}.dgnum"
) to;
}
// settings
);
in
{
options.dgn-backups = {
enable = mkEnableOption "DGNum backup service.";
postgresDatabases = mkOption {
type = listOf str;
default = [ ];
description = ''
List of postgres databases to dump into bupstash.
'';
};
jobs = mkOption {
type = attrsOf (submodule {
options = {
to = mkOption {
type = listOf str;
default = remove name [
"compute01"
"geo01"
"geo02"
"storage01"
];
description = "Hosts to send the backups to.";
};
settings = mkOption {
type = attrs;
default = { };
description = "Base bupstash job config.";
};
};
});
default = { };
description = "List of bupstash jobs.";
};
};
config = {
dgn-backups.jobs = lib.extra.mapFuse (db: {
"${db}-db".settings = {
user = "postgres";
command = [
(getExe' config.services.postgresql.package "pg_dump")
db
];
};
}) cfg.postgresDatabases;
services.bupstash = {
repositories = {
inherit (cfg) enable;
home = homes.${name};
access = [
{
repo = "default";
keys = dgn-keys.getKeys [
"compute01"
"storage01"
"vault01"
"web01"
"web02"
"web03"
];
allowed = [ "put" ];
}
];
};
jobs = mkJobs cfg.jobs;
};
programs.ssh.knownHosts =
lib.extra.mapFuse (host: { "${host}.dgnum".publicKey = builtins.head dgn-keys._keys.${host}; })
[
"compute01"
"geo01"
"geo02"
"storage01"
];
};
}