refactor rclone to a module

2 files changed, 38 insertions, 0 deletions

diff --git a/modules/services/default.nix b/modules/services/default.nix
index 94250d2..6dfc4fb 100644
--- a/modules/services/default.nix
+++ b/modules/services/default.nix
@@ -7,6 +7,7 @@
     ./grafana
     ./navidrome
     ./prometheus
+    ./rclone
     ./samba
     ./ssh-server
     ./tailscale
diff --git a/modules/services/rclone/default.nix b/modules/services/rclone/default.nix
new file mode 100644
index 0000000..1ccf5df
--- /dev/null
+++ b/modules/services/rclone/default.nix
@@ -0,0 +1,37 @@
+{ config, pkgs, lib, ... }:
+let cfg = config.my.services.rclone;
+in {
+  options.my.services.rclone = with lib; {
+    enable = mkEnableOption "rclone backup service";
+  };
+
+  config = lib.mkIf cfg.enable {
+    age.secrets.rclone-gcs-sa.file =
+      ../../../secrets/rclone/gcs_service_account.json.age;
+
+    age.secrets.rclone-config.file = ../../../secrets/rclone/config.ini.age;
+
+    systemd = {
+      packages = [ pkgs.rclone ];
+      timers.rclone-sync = {
+        description = "synchronize restic repository to GCS";
+        wantedBy = [ "timers.target" ];
+        partOf = [ "rclone-sync.service" ];
+        timerConfig = { OnCalendar = "02:00"; };
+      };
+      services.rclone-sync = {
+        description = "synchronize restic repository to GCS";
+        serviceConfig = let
+          rcloneOptions =
+            "--config=${config.age.secrets.rclone-config.path} --gcs-service-account-file=${config.age.secrets.rclone-gcs-sa.path} --fast-list --verbose";
+        in {
+          Type = "oneshot";
+          ExecStart = [
+            "${pkgs.rclone}/bin/rclone ${rcloneOptions} sync /data/slow/backups/systems gbackup:fcuny-backups-systems"
+            "${pkgs.rclone}/bin/rclone ${rcloneOptions} sync /data/slow/backups/users gbackup:fcuny-backups-users"
+          ];
+        };
+      };
+    };
+  };
+}