{ lib, ... }:
{
  resource.google_storage_bucket.backups = {
    name = "fcuny-infra-backups";
    storage_class = "NEARLINE";
    force_destroy = true;
    uniform_bucket_level_access = true;
    public_access_prevention = "enforced";
    location = lib.tfRef "var.gcp_region";

    lifecycle_rule = [
      {
        condition.age = 365; # After 1 year
        action = {
          type = "SetStorageClass";
          storage_class = "COLDLINE";
        };
      }
      {
        condition.age = 730; # After 2 years
        action = {
          type = "SetStorageClass";
          storage_class = "ARCHIVE";
        };
      }
    ];
  };
}