update backups

hosts/backup/default.nix

@@ -94,4 +94,16 @@ networking = {
   nixpkgs.config.allowUnfree = true;
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
   system.stateVersion = "26.05";
+
+
+
+  services.restic.server = {
+    enable = true;
+	listenAddress = "10.0.0.4:8000";
+	dataDir = "/var/lib/restic";
+	appendOnly = true;
+	extraFlags = [ "--no-auth" ];
+  };
+
+  networking.firewall.interfaces.wg0.allowedTCPPorts = [ 8000 ];
 }

hosts/desktop/default.nix

@@ -9,6 +9,7 @@
     ../../modules/site/mail.nix
     ../../modules/site/music.nix
     ../../modules/site/photo.nix
+	../../modules/site/vault.nix
 
 	../../modules/ssh.nix
   ];
@@ -103,6 +104,7 @@
     whipper
 	flac
 	tor-browser
+	restic
   ];
 
   programs.steam.enable = true;
@@ -130,4 +132,13 @@
   nixpkgs.config.allowUnfree = true;
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
   system.stateVersion = "26.05";
+
+  services.restic.backups.backup = {
+    repository = "rest:http://10.0.0.4:8000/backup";
+	initialize = true;
+	passwordFile = "/home/lilac/test-password";
+	paths = [ "/var/lib/immich" "/var/lib/music" "/var/lib/gitea" "/var/lib/vault-backup" ];
+	timerConfig.OnCalendar = "03:30";
+	pruneOpts = [ "--keep-daily 7" "--keep-weekly 4" "--keep-monthly 12" ];
+  };
 }

modules/site/vault.nix

@@ -0,0 +1,21 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.vaultwarden = {
+    enable = true;
+	backupDir = "/var/lib/vault-backup";
+    config = {
+      DOMAIN = "https://vault.example.com";
+      SIGNUPS_ALLOWED = false;
+      ROCKET_ADDRESS = "127.0.0.1";
+      ROCKET_PORT = 8222;
+    };
+  };
+
+  services.caddy = {
+    enable = true;
+	virtualHosts."vault.grasswren.net".extraConfig = ''
+	  reverse_proxy localhost:8222
+	'';
+  };
+}