hosts/clerie-backup,hosts/backup-4: add restic server backup nodes

hosts/backup-4/configuration.nix

@@ -7,6 +7,7 @@
       ../../configuration/proxmox-vm
 
       ./backup.nix
+      ./restic-server.nix
     ];
 
   boot.loader.grub.enable = true;
@@ -20,6 +21,10 @@
   networking.defaultGateway6 = { address = "2001:638:904:ffcb::1"; interface = "ens18"; };
   networking.nameservers = [ "2001:638:904:ffcc::3" "2001:638:904:ffcc::4" "141.24.40.3" "141.24.40.4" ];
 
+  services.nginx.enable = true;
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
   clerie.monitoring = {
     enable = true;
     id = "205";

hosts/backup-4/restic-server.nix

@@ -0,0 +1,21 @@
+{ ... }:
+
+{
+  services.restic.server = {
+    enable = true;
+    privateRepos = true;
+    dataDir = "/mnt/backup-4/magenta";
+    listenAddress = "[::1]:43242";
+  };
+
+  services.nginx.virtualHosts."magenta.backup.clerie.de" = {
+    enableACME = true;
+    forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://[::1]:43242/";
+      extraConfig = ''
+        client_max_body_size 10G;
+      '';
+    };
+  };
+}