hosts/common/server/rclone.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

{ config, pkgs, lib, ... }:

{
  environment.systemPackages = with pkgs; [ rclone ];

  age.secrets.rclone-gcs-sa.file =
    ../../../secrets/rclone/gcs_service_account.json.age;

  age.secrets.rclone-config.file = ../../../secrets/rclone/config.ini.age;

  systemd = {
    timers.rclone-sync = {
      wantedBy = [ "timers.target" ];
      partOf = [ "rclone-sync.service" ];
      timerConfig = { OnCalendar = "02:00"; };
    };
    services.rclone-sync = let rcloneOptions = "--fast-list --verbose";
    in {
      serviceConfig.Type = "oneshot";
      serviceConfig.Environment = {
        RCLONE_GCS_SERVICE_ACCOUNT_CREDENTIALS =
          config.age.secrets.rclone-gcs-sa.path;
      };
      script = ''
        ${pkgs.rclone}/bin/rclone --config=${age.secrets.rclone-config.path} sync ${rcloneOptions} /data/slow/backups gbackup:fcuny-backups
      '';
    };
  };
}