this repo has no description
chore: add litestream backups for tangled components
+61
+1
flake.nix
+1
flake.nix
+60
hosts/tangled/services/litestream.nix
+60
hosts/tangled/services/litestream.nix
···
1
+
{
2
+
services.litestream = {
3
+
enable = true;
4
+
environmentFile = "/etc/secrets/litestream.env";
5
+
6
+
settings = {
7
+
dbs = [
8
+
{
9
+
path = "/home/git/knotserver.db";
10
+
replicas = [
11
+
{
12
+
type = "s3";
13
+
bucket = "tangled-knot-backup";
14
+
path = "knotserver.db";
15
+
retention = "72h";
16
+
validation-interval = "8h";
17
+
snapshot-interval = "1h";
18
+
endpoint = "$S3_ENDPOINT";
19
+
region = "garage";
20
+
}
21
+
];
22
+
}
23
+
{
24
+
path = "/var/lib/spindle/spindle.db";
25
+
replicas = [
26
+
{
27
+
type = "s3";
28
+
bucket = "tangled-spindle-backup";
29
+
path = "spindle.db";
30
+
retention = "72h";
31
+
validation-interval = "8h";
32
+
snapshot-interval = "1h";
33
+
endpoint = "$S3_ENDPOINT";
34
+
region = "garage";
35
+
}
36
+
];
37
+
}
38
+
];
39
+
};
40
+
};
41
+
42
+
systemd.services.litestream.serviceConfig = {
43
+
ReadWritePaths = [ "/home/git" "/var/lib/spindle" ];
44
+
};
45
+
46
+
systemd.tmpfiles.rules = [
47
+
"d /home/git 0775 root litestream - -"
48
+
"a+ /home/git - - - - user:litestream:rwx"
49
+
"a+ /home/git/knotserver.db - - - - user:litestream:rwx"
50
+
"a+ /home/git/knotserver.db-wal - - - - user:litestream:rwx"
51
+
"a+ /home/git/knotserver.db-shm - - - - user:litestream:rwx"
52
+
"a+ /home/git/.knotserver.db-litestream - - - - user:litestream:rwx"
53
+
"d /var/lib/spindle 0775 root litestream - -"
54
+
"a+ /var/lib/spindle - - - - user:litestream:rwx"
55
+
"a+ /var/lib/spindle/spindle.db - - - - user:litestream:rwx"
56
+
"a+ /var/lib/spindle/spindle.db-wal - - - - user:litestream:rwx"
57
+
"a+ /var/lib/spindle/spindle.db-shm - - - - user:litestream:rwx"
58
+
"a+ /var/lib/spindle/.spindle.db.litestream - - - - user:litestream:rwx"
59
+
];
60
+
}