apparmor: fix path

[sourcephile-nix.git] / servers / losurdo / syncoid.nix

diff --git a/servers/losurdo/syncoid.nix b/servers/losurdo/syncoid.nix
index 3211149c3eae9a361a0e51af2035b0c1cdf0abd1..968d3580d2f49657aea14fda9d756d35b6198319 100644 (file)
--- a/servers/losurdo/syncoid.nix
+++ b/servers/losurdo/syncoid.nix
@@ -1,19 +1,31 @@
 { pkgs, lib, config, ... }:
+let inherit (config.security) pass; in
 {
 services.syncoid = {
   enable = true;
   interval = "*-*-* *:15:00";
-  sshKey = "/root/.ssh/id_ed25519";
-  commonArgs = [ "--no-sync-snap" ];
+  sshKey = pass.secrets."/root/.ssh/id_ed25519".path;
+  commonArgs = [
+    "--no-sync-snap"
+    "--create-bookmark"
+  ];
   commands = {
     "losurdo_nvme/home/julm/work" = {
       sendOptions = "raw";
       target = "root@mermet.sourcephile.fr:rpool/backup/losurdo/home/julm/work";
     };
+    "losurdo_nvme/var/postgresql" = {
+      sendOptions = "raw";
+      target = "root@mermet.sourcephile.fr:rpool/backup/losurdo/var/postgresql";
+    };
     "root@mermet.sourcephile.fr:rpool/var/mail" = {
       sendOptions = "raw";
       target = "losurdo_nvme/backup/mermet/var/mail";
     };
+    "root@mermet.sourcephile.fr:rpool/var/public-inbox" = {
+      sendOptions = "raw";
+      target = "losurdo_nvme/backup/mermet/var/public-inbox";
+    };
     "root@mermet.sourcephile.fr:rpool/var/www" = {
       sendOptions = "raw";
       target = "losurdo_nvme/backup/mermet/var/www";