changed backup strategy

.gitattributes

@@ -1,3 +1,4 @@
 #pattern  filter=crypt diff=crypt merge=crypt
 features/server/services/forgejo-smtp.nix filter=crypt diff=crypt 
 features/server/services/nextcloud-network.nix filter=crypt diff=crypt 
+features/server/backups-repos.nix filter=crypt diff=crypt 

.gitignore

@@ -0,0 +1 @@
+secrets/backup.yaml

features/server/backups-repos.nix

@@ -0,0 +1,5 @@
+U2FsdGVkX1+pKUtcxhT27nl6afKy5paC7y9iBtZgbq2rnuJebgGFCD0AxE1TOWMV
+RaWwqeK7YaU7MnImh+b7JfR3C7b6OgQz3+V+gGhC8f10e23maH/me3m3SNsxLp4w
+BS4SQZzrWc5WHS+QHTCH7tfUyFPYBs8xnfMAN+TGqB/ud0l7ZZ7MRvpU2IHpzoi1
+8ek6OT+w/oyXU3o5eVklEuXpTEB2dcGJ41hbXCEDn7ELyfpaF/+Tx5yGGIJ73FvS
++P2s1wpjWnrHPj78aphmdm8Q/PZ81vDU4/e2nyg4OcHyOPXVVnwhRUWl1Y9/a/sK

features/server/backups.nix

@@ -1,8 +1,15 @@
 { config, ... }:
 {
+  imports = [
+
+  ];
   sops.secrets.borgRepoPassword = { };
+  sops.secrets.borgRemoteServerPassword = {
+    sopsFile = ../../secrets/backup.yaml;
+  };
 
   services.borgbackup.jobs = {
+    /*
             localBackup = {
               paths = "/";
               exclude = [
@@ -12,9 +19,13 @@
                 "/srv/backups/serverBackups"
                 "/srv/backups/localComputerBackups"
                 "/var/cache"
+                "/var/run"
                 "/tmp"
                 "/proc"
                 "/sys"
+                "/dev"
+                "/mnt"
+                "/run"
               ];
               repo = "/srv/backups/serverBackups";
               doInit = true;
@@ -41,4 +52,37 @@
       path = "/srv/backups/localComputerBackups";
     };
   };
+
+  services.borgmatic = {
+    enable = true;
+    configurations = {
+      remoteServer = {
+        source_directories = [
+          "/var"
+          "/etc"
+          "/home"
+          "/srv/freshrss"
+          "/srv/Minecraft"
+        ];
+        postgres_databases = [
+          "forgejo"
+          "nextcloud"
+          "matrix-synapse"
+        ];
+        exclude_patterns = [ "/home/*/.cache" ];
+        encryption_passcommand = "cat /run/secrets/borgRemoteServerPassword";
+      };
+    };
+  };
+
+  systemd.timers.borgmatic = {
+    enable = true;
+    unit = "borgmatic.service";
+    wantedBy = [ "timers.target" ];
+    timerConfig = {
+      OnCalendar = "*-*-* 03:00:00";
+      Persistent = true;
+      WakeSystem = true;
+    };
+  };
 }