1 { pkgs, lib, config, machineName, machines, ... }:
3 inherit (config) networking;
4 inherit (config.security) gnupg;
7 networking.nftables.ruleset = ''
8 add rule inet filter fw2net tcp dport 22 ip daddr ${machines.mermet.extraArgs.ipv4} counter accept comment "SSH to mermet"
12 interval = "*-*-* *:05:00";
13 sshKey = gnupg.secrets."ssh/backup.ssh-ed25519".path;
17 "--no-privilege-elevation"
20 "${machineName}/home/julm/work" = {
22 target = "backup@mermet.${networking.domain}:rpool/backup/${machineName}/home/julm/work";
24 "${machineName}/var/postgresql" = {
26 target = "backup@mermet.${networking.domain}:rpool/backup/${machineName}/var/postgresql";
28 "backup@mermet.${networking.domain}:rpool/var/mail" = {
30 target = "${machineName}/backup/mermet/var/mail";
32 "backup@mermet.${networking.domain}:rpool/var/public-inbox" = {
34 target = "${machineName}/backup/mermet/var/public-inbox";
36 "backup@mermet.${networking.domain}:rpool/var/www" = {
38 target = "${machineName}/backup/mermet/var/www";
40 "backup@mermet.${networking.domain}:rpool/var/git" = {
42 target = "${machineName}/backup/mermet/var/git";
44 "backup@mermet.${networking.domain}:rpool/var/redis" = {
46 target = "${machineName}/backup/mermet/var/redis";
48 "backup@mermet.${networking.domain}:rpool/home/julm/mail" = {
50 target = "${machineName}/backup/mermet/home/julm/mail";
52 "backup@mermet.${networking.domain}:rpool/home/julm/log" = {
54 target = "${machineName}/backup/mermet/home/julm/log";