From 5ddf8241ec2eb8faed264781fedc927e62a3c20d Mon Sep 17 00:00:00 2001
From: Timo Wilken
Date: Thu, 20 Apr 2023 23:39:07 +0200
Subject: Draft of restic server deployment

---
 tw/system/vin.scm | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

(limited to 'tw/system/vin.scm')

diff --git a/tw/system/vin.scm b/tw/system/vin.scm
index e8baec57..e74d0df6 100644
--- a/tw/system/vin.scm
+++ b/tw/system/vin.scm
@@ -4,6 +4,7 @@
   #:use-module (gnu system locale)
   #:use-module (gnu system nss)
   #:use-module (guix gexp)
+  #:use-module (tw services restic)
   #:use-module (tw system))
 
 ;; The device's BIOS does not support UEFI, sadly.  It also doesn't recognise
@@ -40,7 +41,19 @@
 
     ;; Below is the list of system services.  To search for available
     ;; services, run 'guix system search KEYWORD' in a terminal.
-    (services (server-base-services host-name))
+    (services
+     (cons*
+      (service restic-server-service-type
+        (restic-server-configuration
+         (repository-path "/var/backups/restic")
+         (bind-address
+          (server-wireguard-address host-name ":8181"))
+         (append-only? #t)  ; run cleanup jobs separately, using plain restic
+         (private-repos-only? #t)  ; require /user/ path prefix
+         (prometheus? #t)
+         (prometheus-auth? #f)))
+
+      (server-base-services host-name)))
 
     ;; The list of user accounts ('root' is implicit).
     (users %server-base-user-accounts)
-- 
cgit v1.2.3