{config, pkgs, ... }: let forgejo-borgbackup = pkgs.writeShellScriptBin "forgejo-borgbackup" '' #!/bin/sh set -e #stop forgejo systemctl stop forgejo.service # MySQL-Backup MYSQL_DATABASE="forgejodb" ${pkgs.mariadb}/bin/mysqldump -u root ''${MYSQL_DATABASE} > /borgbackupcache/forgejobackup.sql # BorgBackup export BORG_PASSCOMMAND="cat /etc/nixos/borgpassword" export BORG_REPO="backup@cloud.shibe.pro:/mnt/onedrive/Backups/borg/forgejo" export BACKUP_NAME="forgejo-$(date +%Y-%m-%d)" # Add everything to be backed up ${pkgs.borgbackup}/bin/borg create --verbose --filter AME --list --stats --show-rc --compression lz4 --exclude-caches \ $BORG_REPO::$BACKUP_NAME \ /var/lib/forgejo/repositories/ \ /var/lib/forgejo/data/ \ /borgbackupcache/forgejobackup.sql # Remove DB dump rm /borgbackupcache/forgejobackup.sql # Start Forgejo again systemctl start forgejo.service # Prune old backups ${pkgs.borgbackup}/bin/borg prune --list $BORG_REPO --prefix 'forgejo-' --show-rc --keep-daily=7 --keep-weekly=4 --keep-monthly=6 ''; in { environment.systemPackages = [ pkgs.borgbackup ]; # Create folders systemd.tmpfiles.rules = [ "d /borgbackupcache 700 root root" ]; # Backup timer systemd.services.borg-backup = { description = "Borg Backup for Forgejo and MySQL"; serviceConfig = { ExecStart = "${forgejo-borgbackup}/bin/forgejo-borgbackup"; User = "root"; }; wantedBy = [ "multi-user.target" ]; }; systemd.timers.borg-backup = { description = "Daily Borg Backup Timer"; wantedBy = [ "timers.target" ]; timerConfig = { OnCalendar = "daily"; Persistent = true; }; }; }