path: root/nix/tofu/backups.nix

{
  pkgs,
}:
pkgs.writeTextFile {
  name = "backups.tf.json";
  text = builtins.toJSON ([
    {
      terraform = {
        backend = {
          gcs = {
            bucket = "fcuny-infra-tofu-state";
            prefix = "backups";
          };
        };
      };
    }
    {
      provider = {
        google = [
          {
            project = "fcuny-infra";
            region = "us-west1";
          }
        ];
      };
    }
    {
      resource = {
        google_storage_bucket = {
          "backups" = {
            name = "fcuny-infra-backups";
            location = "us-west1";
            uniform_bucket_level_access = true;
            force_destroy = true;
            public_access_prevention = "enforced";
            storage_class = "NEARLINE";
          };
        };
      };
    }
  ]);
}