Backups for web-2

hosts/web-2/configuration.nix

@@ -36,5 +36,23 @@
 
   networking.firewall.allowedTCPPorts = [ 80 443 ];
 
+  services.borgbackup.jobs = {
+    main = {
+      paths = [
+        "/var/src"
+        "/var/lib"
+      ];
+      doInit = true;
+      repo =  "borg@backup.clerie.de:." ;
+      encryption = {
+        mode = "repokey-blake2";
+        passCommand = "cat /var/src/secrets/borg/main";
+      };
+      environment = { BORG_RSH = "ssh -i /var/src/secrets/ssh/borg-main"; };
+      compression = "auto,lzma";
+      startAt = "hourly";
+    };
+  };
+
   system.stateVersion = "21.03";
 }