sets up vaultwarden backup

hosts/dnsc-vps-sm/default.nix

@@ -115,6 +115,7 @@
     wget
     docker-compose
     actual-server
+    restic
   ];
 
   # Programs
@@ -160,6 +161,26 @@
     '';
   };
 
+  # Restic
+  services.restic.backups.dnsc-vps-sm-backup = {
+    initialize = true;
+    passwordFile = config.age.secrets."restic/password".path;
+    repository = "sftp:dnsc-storage:restic/dnsc-vps-sm";
+    paths = [
+      "/var/backup/vaultwarden"
+    ];
+    pruneOpts = [
+      "--keep-daily 1"
+      "--keep-weekly 3"
+      "--keep-monthly 5"
+      "--keep-yearly 10"
+    ];
+    timerConfig = {
+      OnCalendar = "daily";
+      Persistent = true;
+    };
+  };
+
   # Environment variables
   environment.variables.EDITOR = "nvim";
 

modules/vaultwarden/default.nix

@@ -1,8 +1,11 @@
 {
-  config, ...
-}: {
+  config,
+  ...
+}:
+{
   services.vaultwarden = {
     enable = true;
     environmentFile = config.age.secrets."vaultwarden/env".path;
+    backupDir = "/var/backup/vaultwarden";
   };
 }