path: root/hosts/profiles/nas.nix

{ config, pkgs, lib, ... }: {
  imports = [
    # other profiles
    ./server.nix
    ../common/server/traefik.nix
    ../common/server/transmission.nix
    ../common/server/gitea.nix
    ../common/server/rclone.nix
  ];

  users.groups.nas.gid = 5000;
  users.users.nas = {
    uid = 5000;
    group = "nas";
    isSystemUser = true;
  };

  my.services = {
    samba = {
      enable = true;
      publicShares = [ "/data/fast/music" "/data/fast/videos" ];
    };
    navidrome = {
      enable = true;
      musicFolder = "/data/fast/music";
    };
    unifi = { enable = true; };
    prometheus = { enable = true; };
    grafana = { enable = true; };
  };

  services.restic.backups = {
    media = {
      paths = [ "/data/fast/music" "/data/fast/photos" "/data/fast/videos" ];
      repository = "/data/slow/backups/systems";
      passwordFile = config.age.secrets.restic-repo-systems.path;
      timerConfig = { OnCalendar = "00:55"; };
      initialize = true;
      extraBackupArgs = [ "--tag media" ];
      pruneOpts = [ "--keep-daily 7" "--keep-weekly 4" "--keep-monthly 12" ];
    };
  };
}