simon/nixos-config
simon/nixos-config
1
1
Fork 0
Code Issues 8 Pull requests Actions Projects Activity

restic: Add restic-auth authentication wrapper

Browse source
This commit is contained in:
Simon Bruder 2020-12-21 12:54:33 +01:00
parent 3d146db55c
commit 931c7ee91b
No known key found for this signature in database
GPG key ID: 6F03E0000CC5B62F
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
modules/restic.nix
View file

@ -45,6 +45,15 @@ let
]; ];
excludesFile = pkgs.writeText "exludes.txt" (builtins.concatStringsSep "\n" excludes); excludesFile = pkgs.writeText "exludes.txt" (builtins.concatStringsSep "\n" excludes);
maybePath = path: (lib.optional (builtins.pathExists path) (toString path)); maybePath = path: (lib.optional (builtins.pathExists path) (toString path));
# script to use restic as user without dealing with authentication
authScript = pkgs.writeShellScriptBin "restic-auth" ''
. <(pass nixos/machines/${config.networking.hostName}/restic-s3 | sed 's/^/export /')
${pkgs.restic}/bin/restic \
--password-command="pass nixos/machines/${config.networking.hostName}/restic-password" \
--repo "${repository}" \
$@
'';
in in
{ {
options.sbruder.restic = { options.sbruder.restic = {
@ -91,5 +100,9 @@ in
"IOSchedulingClass" = "best-effort"; "IOSchedulingClass" = "best-effort";
"IOSchedulingPriority" = 7; "IOSchedulingPriority" = 7;
}; };
environment.systemPackages = [
authScript
];
}; };
} }