nixos_forgejo/backup.nix

{config, pkgs, ... }:


let
  forgejo-borgbackup = pkgs.writeShellScriptBin "forgejo-borgbackup" ''
    #!/bin/sh
    set -e
    #stop forgejo
    systemctl stop forgejo.service
    # MySQL-Backup
    MYSQL_OPTION_FILE="/etc/nixos/dbauth.cnf"
    MYSQL_DATABASE="forgejodb"
    mysqldump --defaults-file="${MYSQL_OPTION_FILE}" $MYSQL_DATABASE > /borgbackupcache/forgejobackup.sql
    # BorgBackup
    export BORG_REPO="ssh://backup@cloud.shibe.pro://mnt/onedrive/Backups/borg"
    export BACKUP_NAME="forgejo-$(date +%Y-%m-%d)"

    # Add everything to be backed up
    ${pkgs.borgbackup}/bin/borg create --verbose --filter AME --list --stats --show-rc --compression lz4 --exclude-caches \
      $BORG_REPO::$BACKUP_NAME \
      /var/lib/forgejo/repositories/ \
      /var/lib/forgejo/data/ \
      /borgbackupcache/forgejobackup.sql
    # Remove DB dump
    rm /borgbackupcache/forgejobackup.sql
    # Start Forgejo again
    systemctl start forgejo.service
    # Prune old backups
    ${pkgs.borgbackup}/bin/borg prune --list $BORG_REPO --prefix 'forgejo-' --show-rc --keep-daily=7 --keep-weekly=4 --keep-monthly=6
  '';
  in
  {
    environment.systemPackages = [ pkgs.borgbackup ];
    # Create folders
    systemd.tmpfiles.rules = [
	    "d /borgbackupcache 700 root root"
    ];
    # Backup timer
   systemd.services.borg-backup = {
   description = "Borg Backup for Forgejo and MySQL";
   serviceConfig = {
     ExecStart = "${forgejo-borgbackup}";
     User = "root";
   };
   wantedBy = [ "multi-user.target" ];
 };

 systemd.timers.borg-backup = {
   description = "Daily Borg Backup Timer";
   wantedBy = [ "timers.target" ];
   timerConfig = {
     OnCalendar = "daily";
     Persistent = true;
   };
 };
  }