losurdo: add creds

[sourcephile-nix.git] / hosts / mermet / sanoid.nix

diff --git a/hosts/mermet/sanoid.nix b/hosts/mermet/sanoid.nix
index 7fb0a36cd427ccfaa0b2e4c0cf5877cded904f48..9607894face828d6dd8bc6ba75ff306251683380 100644 (file)
--- a/hosts/mermet/sanoid.nix
+++ b/hosts/mermet/sanoid.nix
@@ -1,4 +1,4 @@
-{ pkgs, lib, config, inputs, ... }:
+{ pkgs, lib, config, ... }:
 let
   inherit (builtins) readFile;
   inherit (config.users) users groups;
@@ -9,7 +9,7 @@ users.users.backup = {
   shell = users.root.shell;
   group = groups.disk.name;
   openssh.authorizedKeys.keys = [
-    (readFile (inputs.secrets + "/hosts/losurdo/ssh/backup.ssh-ed25519.pub"))
+    (readFile ../losurdo/syncoid/sshKey.pub)
   ] ++ users."julm".openssh.authorizedKeys.keys;
 };
 systemd.tmpfiles.rules = [
@@ -25,15 +25,23 @@ systemd.services.sanoid.serviceConfig.SupplementaryGroups = [ groups."disk".name
 services.sanoid = {
   enable = true;
   templates = {
-    local = {
+    snap = {
       autosnap = true;
       autoprune = true;
+      yearly = 0;
       monthly = 3;
+      daily = 31;
+      hourly = 0;
+      frequently = 0;
     };
-    remote = {
+    prune = {
       autosnap = false;
       autoprune = true;
+      yearly = 0;
       monthly = 3;
+      daily = 31;
+      hourly = 24;
+      frequently = 0;
     };
   };
   extraArgs = [
@@ -42,13 +50,10 @@ services.sanoid = {
   ];
   datasets = {
     "rpool/backup/losurdo/var/postgresql" = {
-      use_template = [ "remote" ];
-      daily = 31;
+      use_template = [ "prune" ];
     };
     "rpool/backup/losurdo/var/cryptpad" = {
-      use_template = [ "remote" ];
-      daily = 31;
-      monthly = 0;
+      use_template = [ "prune" ];
     };
   };
 };