Tom Hubrecht
ecbad0a638
All checks were successful
Check workflows / check_workflows (push) Successful in 21s
Run pre-commit on all files / check (push) Successful in 24s
Check meta / check_dns (pull_request) Successful in 19s
Check meta / check_meta (pull_request) Successful in 18s
Check workflows / check_workflows (pull_request) Successful in 19s
Build all the nodes / bridge01 (pull_request) Successful in 1m13s
Build all the nodes / geo01 (pull_request) Successful in 1m14s
Build all the nodes / compute01 (pull_request) Successful in 1m44s
Build all the nodes / geo02 (pull_request) Successful in 1m12s
Build all the nodes / rescue01 (pull_request) Successful in 1m30s
Build all the nodes / storage01 (pull_request) Successful in 1m29s
Build all the nodes / vault01 (pull_request) Successful in 1m26s
Build all the nodes / web02 (pull_request) Successful in 1m19s
Run pre-commit on all files / check (pull_request) Successful in 24s
Build all the nodes / web01 (pull_request) Successful in 1m56s
Build all the nodes / web03 (pull_request) Successful in 1m25s
This adds subdirectories for the different types of systems, for the modules and the machines
130 lines
2.6 KiB
Nix
130 lines
2.6 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
dgn-keys,
|
|
name,
|
|
...
|
|
}:
|
|
|
|
let
|
|
inherit (lib) mkEnableOption mkOption remove;
|
|
|
|
inherit (lib.types)
|
|
attrs
|
|
attrsOf
|
|
listOf
|
|
str
|
|
submodule
|
|
;
|
|
|
|
cfg = config.dgn-backups;
|
|
|
|
homes = {
|
|
compute01 = "/data/slow/bupstash";
|
|
geo01 = "/data/bupstash";
|
|
geo02 = "/data/bupstash";
|
|
storage01 = "/data/slow/bupstash";
|
|
};
|
|
|
|
starts = {
|
|
compute01 = "*-*-* *:38:00";
|
|
storage01 = "*-*-* *:21:00";
|
|
web01 = "*-*-* *:47:00";
|
|
};
|
|
|
|
mkJobs = builtins.mapAttrs (
|
|
_:
|
|
{ to, settings }:
|
|
{
|
|
startAt = starts.${name};
|
|
key = config.age.secrets."bupstash-put_key".path;
|
|
repositoryCommands = lib.extra.mapSingleFuse (
|
|
host: "ssh -i /etc/ssh/ssh_host_ed25519_key bupstash-repo@${host}.dgnum"
|
|
) to;
|
|
}
|
|
// settings
|
|
);
|
|
in
|
|
|
|
{
|
|
options.dgn-backups = {
|
|
enable = mkEnableOption "DGNum backup service.";
|
|
|
|
postgresDatabases = mkOption {
|
|
type = listOf str;
|
|
default = [ ];
|
|
description = ''
|
|
List of postgres databases to dump into bupstash.
|
|
'';
|
|
};
|
|
|
|
jobs = mkOption {
|
|
type = attrsOf (submodule {
|
|
options = {
|
|
to = mkOption {
|
|
type = listOf str;
|
|
default = remove name [
|
|
"compute01"
|
|
"geo01"
|
|
"geo02"
|
|
"storage01"
|
|
];
|
|
description = "Hosts to send the backups to.";
|
|
};
|
|
|
|
settings = mkOption {
|
|
type = attrs;
|
|
default = { };
|
|
description = "Base bupstash job config.";
|
|
};
|
|
};
|
|
});
|
|
default = { };
|
|
description = "List of bupstash jobs.";
|
|
};
|
|
};
|
|
|
|
config = {
|
|
dgn-backups.jobs = lib.extra.mapFuse (db: {
|
|
"${db}-db".settings = {
|
|
user = "postgres";
|
|
command = [
|
|
"${lib.getExe' config.services.postgresql.package "pg_dump"}"
|
|
db
|
|
];
|
|
};
|
|
}) cfg.postgresDatabases;
|
|
|
|
services.bupstash = {
|
|
repositories = {
|
|
inherit (cfg) enable;
|
|
|
|
home = homes.${name};
|
|
|
|
access = [
|
|
{
|
|
repo = "default";
|
|
keys = dgn-keys.getKeys [
|
|
"compute01"
|
|
"storage01"
|
|
"vault01"
|
|
"web01"
|
|
];
|
|
allowed = [ "put" ];
|
|
}
|
|
];
|
|
};
|
|
|
|
jobs = mkJobs cfg.jobs;
|
|
};
|
|
|
|
programs.ssh.knownHosts =
|
|
lib.extra.mapFuse (host: { "${host}.dgnum".publicKey = builtins.head dgn-keys._keys.${host}; })
|
|
[
|
|
"compute01"
|
|
"geo01"
|
|
"geo02"
|
|
"storage01"
|
|
];
|
|
};
|
|
}
|