borg: wip

configs/workhorse/borg.nix

@@ -0,0 +1,14 @@
+{ lib, config, pkgs, ... }: {
+
+  services.borgbackup.repos = {
+    default = {
+      quota = "100G";
+      allowSubRepos = true;
+      authorizedKeysAppendOnly = [
+        # todo rename this one
+        (toString <common_secrets/backup/sftp-user_rsa.pub>)
+      ];
+    };
+  };
+
+}

configs/workhorse/configuration.nix

@@ -24,6 +24,7 @@
     #./wetten.nix
     ./nextcloud.nix
     ./mattermost.nix
+    ./borg.nix
   ];
 
   # todo: add this to each file instead summing that here

configs/workhorse/hardware-configuration.nix

@@ -55,7 +55,7 @@ in {
 
   # var/lib/docker
   # --------------
-  fileSystems."/var/lib/docker" = {
+  fileSystems."/var/lib/borgbackup" = {
     options = [ "noatime" "nodiratime" ];
     device = "/dev/mapper/decrypted_docker";
     fsType = "ext4";