working on temporary rsync script rbackup.nix

nixos/machines/chungus/configuration.nix

@@ -30,7 +30,7 @@
     #./home-display.nix
     #./tdarr.nix
 
-    ./rsync.nix
+    ./rbackup.nix
 
   ];
 

nixos/machines/chungus/disko-config.nix

@@ -86,6 +86,7 @@ in
         rootFsOptions = {
           mountpoint = "none";
           canmount = "off";
+          compression = "lz4";
         };
         datasets = {
           "root" = {
@@ -129,6 +130,14 @@ in
               "com.sun:auto-snapshot:montly" = "true,keep=48";
             };
           };
+          "legacy" = {
+            type = "zfs_fs";
+            mountpoint = "/legacy";
+            options = {
+              mountpoint = "legacy";
+              compression = "lz4";
+            };
+          };
           "borg" = {
             type = "zfs_fs";
             mountpoint = "/borg";

nixos/machines/chungus/rbackup.nix

@@ -0,0 +1,34 @@
+{ config, ... }:
+{
+  sops.secrets.rsync_private_key = { };
+
+  rbackup.plans = {
+    nextcloud = {
+      sshKeyPath = config.sops.secrets.rsync_private_key.path;
+      src = "root@robi:/var/lib/nextcloud/";
+      dst = "/nextcloud";
+    };
+    taskwarrior = {
+      sshKeyPath = config.sops.secrets.rsync_private_key.path;
+      src = "root@robi:/var/lib/taskwarrior/";
+      dst = "/services/taskwarrior";
+    };
+    gitea = {
+      sshKeyPath = config.sops.secrets.rsync_private_key.path;
+      src = "root@robi:/var/lib/gitea/";
+      dst = "/services/gitea";
+    };
+    bitwarden = {
+      sshKeyPath = config.sops.secrets.rsync_private_key.path;
+      src = "root@robi:/var/lib/bitwarden_rs/";
+      dst = "/services/bitwarden_rs";
+    };
+    media = {
+      sshKeyPath = config.sops.secrets.rsync_private_key.path;
+      src = "root@robi:/media/syncthing/media/";
+      dst = "/media";
+    };
+  };
+
+
+}

nixos/machines/chungus/rsync.nix

@@ -1,4 +0,0 @@
-{ ... }:
-{
-  sops.secrets.rsync_private_key = { };
-}

nixos/modules/default.nix

@@ -5,6 +5,7 @@
     ./services/light-control.nix
 
     ./services/castget.nix
+    ./services/rbackup.nix
     ./services/home-assistant.nix
     ./services/lektor.nix
     ./services/samba-share.nix

nixos/modules/services/rbackup.nix

@@ -0,0 +1,89 @@
+{ config, lib, pkgs, ... }:
+with lib;
+let
+  escape = escapeShellArg;
+  cfg = config.rbackup;
+
+  start = name: plan:
+    let
+      login-name = "root";
+      identity = plan.sshKeyPath;
+      ssh = "ssh -i ${escape identity}";
+    in
+    pkgs.writers.writeBash "backup.${name}" ''
+      set -efu
+      rsync_src=${escape plan.src}
+      rsync_dst=${escape plan.dst}
+      echo >&2 "update snapshot current; $rsync_dst <- $rsync_src"
+
+      rsync \
+          --rsh=${escape ssh} \
+          --append -avz \
+          --delete \
+          "$rsync_src/" \
+          "$rsync_dst"
+    '';
+
+in
+{
+  options.rbackup = {
+    plans = mkOption {
+      default = { };
+      type = types.attrsOf
+        (types.submodule ({ config, ... }: {
+          options = {
+            sshKeyPath = mkOption {
+              type = types.str;
+            };
+            src = mkOption {
+              type = types.str;
+            };
+            dst = mkOption {
+              type = types.str;
+            };
+            startAt = mkOption {
+              default = "hourly";
+              type = with types; nullOr str; # TODO systemd.time(7)'s calendar event
+            };
+            timerConfig = mkOption {
+              type = with types; attrsOf str;
+              default = optionalAttrs (config.startAt != null) {
+                OnCalendar = config.startAt;
+              };
+            };
+          };
+        }));
+    };
+  };
+
+  config = {
+
+    systemd.services =
+      mapAttrs'
+        (name: plan: nameValuePair "rbackup.${name}" {
+          path = with pkgs; [
+            coreutils
+            gnused
+            openssh
+            rsync
+            util-linux
+          ];
+          restartIfChanged = false;
+          serviceConfig = rec {
+            ExecStart = start name plan;
+            SyslogIdentifier = ExecStart.name;
+            Type = "oneshot";
+          };
+        })
+        cfg.plans;
+
+    systemd.timers = mapAttrs'
+      (name: plan: nameValuePair "rbackup.${name}" {
+        wantedBy = [ "timers.target" ];
+        timerConfig = plan.timerConfig;
+      })
+      cfg.plans;
+
+  };
+
+}