From c5aebedd7bcd1e5c5237edad248e8473744be40a Mon Sep 17 00:00:00 2001
From: Tom Hubrecht <tom.hubrecht@dgnum.eu>
Date: Wed, 21 Feb 2024 22:55:10 +0100
Subject: [PATCH] feat(web01): Add backups

---
 machines/web01/crabfit/default.nix      |   2 ++
 machines/web01/secrets/bupstash-put_key | Bin 0 -> 2319 bytes
 machines/web01/secrets/secrets.nix      |   1 +
 machines/web01/wordpress/default.nix    |   2 ++
 4 files changed, 5 insertions(+)
 create mode 100644 machines/web01/secrets/bupstash-put_key

diff --git a/machines/web01/crabfit/default.nix b/machines/web01/crabfit/default.nix
index c8f6c60..c162800 100644
--- a/machines/web01/crabfit/default.nix
+++ b/machines/web01/crabfit/default.nix
@@ -11,4 +11,6 @@ _:
 
     configureNginx = true;
   };
+
+  dgn-backups.postgresDatabases = [ "crabfit" ];
 }
diff --git a/machines/web01/secrets/bupstash-put_key b/machines/web01/secrets/bupstash-put_key
new file mode 100644
index 0000000000000000000000000000000000000000..2af6dee818011043e80a6d4f2121667aa27543ab
GIT binary patch
literal 2319
zcmZXTd6W}{9mi1~Yzh0Im0CO&hzrOu?#?8cOfp&)lG#iq$t07>HJR{M$uXHpCdXuw
zOb$?yQ(=+vEQKOnP^w&VxKPR^=&H~H3Wc>|pHkKZS`VPRuuv9wbpN4$;Qzn(zVGw-
zeZOIzYv3|bxgr%3*-T?r=0QcHYG_jD^Fjj`)9UpaR1Mhzo`^|J>cxcH1c8PCOc$6U
zXz+*zL#mkYru<P5DAExd6_8OrfMbxV6wM>BWFvrb90H0lD-hH;GKB!<q%e2Io=@`*
zL@4-51}h0Yn3l8!<8G7M%Ho`%DxfKs9E_GtG@q$L3IH2YexD=cC$wZDQVlzJvFJ0Y
zYz9jdi1QUJ1tcgiPMSEm$Rc(*t|tUfQZ|##j7E=IcuLAYm`0~OW|USt%BVJO4VNh-
zsI`!qbflP;L>PBCGoX=->hd8im-XZfl#UTq!K?#G13(7xB?**vRGdntn&LAML1IRi
z9mv|toEv8xKA-0&Y%-8>fV5f;W$kELAktzC$vS)*O%`D_fB=##toZ#zgtun&98xak
z(-sv5uttiK?M9nN=OW5RlR}&PXw`)4LjsHk_?QLprF~8*se|vc$@#Ealo^bqRf)9M
z>!OSKU??po^GU9N#PQ~$J7G6w^C5|FQ>*~{7>`&D=yO3OZ4M{B<{a%Yi++p2?lE#I
z3&4PEK~gkO01*J(kchHzf2B}Ogp_ErRL$iA1z#Ye4EzUYy|_Nh;t3{4foX5jNTVr(
zNd*bC*5pJ%oJ(oqWilWpi4<c^A|=L~h{obrG)TchS*gH+gi-N;%VI4@;$SK7OD3?0
zIqy(82}Os8okh3SB<ig`lg?(Ost&ivW{_OmTeU?v89^&9IK#-cq#%h2mo?0qWKAg)
z3yD05snRj52t^pH0><^(ur9>L98oz8aTK4#nQ|rIBGVzVm^LRdTv0fVss!L{faKCb
zBBF>M+N%oL1#QL01*?QP2v`uel`Jy``o8V^D*=@f9i`P2Uc|IjEoOCaa<!m%bD5mg
zBj^osG-Z>63NOTs8mC?nS)WanW$eZZL%OrP!$hM++dw-Cxfp?lP04bkWN{dIIwQj|
zLlos7OoKeAVPGXRfSX_dE@b#h2v5-AENsfg<HoqIh+>GJf^8ZJ&|2&nIhj@IBa{xX
zhbwLt5G7qM3Zi~8%Mx@HMZKuaYc(dz(JEZQY3V0yc5B(-;?*%b5{$=54P`T0QU;jw
z=be5al%*qVAzkG$(##}ECKF{x7)X_ZBtyZ8+ryw725FZ~LLxr6pmiY>#~^4vH?Xsk
z1VCw*`TxDWZ&L4N4Gvyy*M}o96d1tg!wBj^5hGgmh-o}*hlzxj2*+ZgxvIo0IkQDo
z(G?<4UhgcF$}Ve4S0?PBlm(j;j)+x5G|Q4FBzk3#4CPSvL6Z{b<Y8K!tzrowXE39%
zQ5&H&q)lRlXt>#zu~ZPBJ4~j<OjRH;*zFfpu%K}mSSO7~tQc;^pn$PxOz5g2>DA^u
zTs}{N9=AE6K!JhVhK2@pS}cShFbD#uI~XF60vw<`xSW-&1Fc2PZb#W^DIj!JM8T+P
z=H(}6D@Wm)uO{{Cf0qo)YtJs+_QI->Z-aN&j%+#e_tRI#O?ChGn<?9*JAVk4>b~l(
zKO#+kVuHr_`zv+0_VJ2s@U=secU)aJmu#v#vAKWEr>VUQFC~v|@;ue*zxm}Gef{9s
z-1@FTuD+$Kzb30=T4x-cRny+nqwhKYp=o->7Jct-BZmwcvHFf?;^^<cym`i6JGxES
zps_sN__6x4hF{oUe&SyH>&~8SD;a;les}kY8>c=WqdUEXJong({ihfp+44=jg}Pej
zo43_E=0<UeVrF*7F3g*--hbrbp}B6gz#O79i`R@=-!=R;HEve#7-`1Xm*;#I-&M;m
z`g&FU;749>>^ME*{M?z`KTlX|XYX(MVeq6QUGMj8sna@6x1MIEX>Q~9*6CjS^|E0f
ze0*a%dyuZa^=QY3@6P&hNelnZchj7&w)xo7yFMa&Z~3!-j$rAoEjxy5__vP5?})_m
zKJ4y>%edvo-W@XrHGKrM|2*c}w0%DG(WXztHnjcL{ufrpR&?&3+Pc$rVBV=S&5f@W
zR(4G6=-m6nvopsIeQM+3{IATnZQqadefy`SQSp(!!sUH$XnW4pdN)>1_fEg|uhyPp
z2S$7iExqvDe<Y4JSQlXvZZ4>Kd)f8#*G~C&OncL}ymzv3!zl2$dTrgZ+L~(TC)A=z
z{Lc3$cV22MU+Qlp9@6^Vi>?o^uZa%9+dtYa_I=@mHan*n9*5{5OIt_X+%>eLz4I&h
z(_>u@+nncDb_e!$jSjVp-8umnxu|~FU5dD;`OkZ%L&or5sV!}S%})81Rl}z+$2TO(
zV^;5Z>C$xL4C;fM&#m_z@2}a{tzQ8)CFgSgURwCsr*nG8T&(%L`{BQowhjeei75S7
z-W>7{k|Q1(Ub}P>{OSn0ru&tZ7juK4==H?>y-U95_iSeV2yWT=<5j-ti?M~78@tcW
zzV7Y0SfAXSuY;i<N{5>koZNI4jlFVe%`Ml#$I<>_XJ#$$ocmep!Dp&iU*F>KQ%<~e
z<m9odyC!pAPQZ2E9oFN-xbyzCS&`nhc)Y*<&aDf3z6Cx;W~X=UZ2a(-_SCuBzctT3
zc5hPC$&DADKXhO!`+3Lg$Zy7<81iJxjW3pcVu-ESeYw-ow*4ehSiiA-ccf1KMq02{
zwQ1_@E4__;!#Ux*bL_#j2M;IPpWeTrYl7>Ub(f8^_C0#)xf_HK?zy<I?Xme&Cf589
DHBW?M

literal 0
HcmV?d00001

diff --git a/machines/web01/secrets/secrets.nix b/machines/web01/secrets/secrets.nix
index cf456cd..1ae6145 100644
--- a/machines/web01/secrets/secrets.nix
+++ b/machines/web01/secrets/secrets.nix
@@ -4,6 +4,7 @@ let
 in
 lib.setDefault { inherit publicKeys; } [
   "acme-certs_secret"
+  "bupstash-put_key"
   "matterbridge-config_file"
   "named-bind_dnskeys_conf"
   "ntfy_sh-environment_file"
diff --git a/machines/web01/wordpress/default.nix b/machines/web01/wordpress/default.nix
index e493421..d271e70 100644
--- a/machines/web01/wordpress/default.nix
+++ b/machines/web01/wordpress/default.nix
@@ -51,4 +51,6 @@ in
       };
     };
   };
+
+  dgn-backups.jobs.containers.settings.paths = [ "/var/lib/nixos-containers" ];
 }