borg the rest

services/nextcloud.nix

@@ -41,6 +41,34 @@ in {
       "listen.owner" = "caddy";
       "listen.group" = "caddy";
     };
+    borgbackup.jobs."nextcloud" = {
+      repo = "ssh://u506783@u506783.your-storagebox.de:23/./nextcloud";
+      environment = {
+        BORG_RSH = "ssh -i ${config.age.secrets."borg_ed25519".path} -o 'StrictHostKeyChecking=no'";
+      };
+      paths = [
+        "/var/lib/nextcloud"
+        "/var/backup/postgres/nextcloud.sql"
+      ];
+      encryption.mode = "none";
+      compression = "auto,lzma";
+      startAt = "daily";
+      prune.keep = {
+        daily = 7;
+        weekly = 4;
+        monthly = -1;
+      };
+      readWritePaths = [
+        "/var/backup/postgres"
+      ];
+      preHook = ''
+        mkdir -p /var/backup/postgres
+        ${pkgs.sudo}/bin/sudo -u postgres ${pkgs.postgresql}/bin/pg_dump nextcloud > /var/backup/postgres/nextcloud.sql
+      '';
+      postHook = ''
+        rm -f /var/backup/postgres/nextcloud.sql
+      '';
+    };
   };
 
   distrust.services."nextcloud" = {