overhaul of backup system

services/nextcloud.nix

@@ -36,42 +36,12 @@ in {
       };
     };
 
+    # Force disable nginx and adjust permissions as we use caddy
     nginx.enable = lib.mkForce false;
     phpfpm.pools.nextcloud.settings = {
       "listen.owner" = "caddy";
       "listen.group" = "caddy";
     };
-    borgbackup.jobs."nextcloud" = {
-      repo = "ssh://u506783@u506783.your-storagebox.de:23/./nextcloud";
-      environment = {
-        BORG_RSH = "ssh -i ${config.age.secrets."borg_ed25519".path} -o 'StrictHostKeyChecking=no'";
-      };
-      paths = [
-        "/var/lib/nextcloud"
-        "/var/backup/postgres/nextcloud.sql"
-      ];
-      encryption = {
-        mode = "keyfile";
-        passCommand = "cat ${config.age.secrets."borg_pass".path}";
-      };
-      compression = "auto,lzma";
-      startAt = "daily";
-      prune.keep = {
-        daily = 7;
-        weekly = 4;
-        monthly = -1;
-      };
-      readWritePaths = [
-        "/var/backup/postgres"
-      ];
-      preHook = ''
-        mkdir -p /var/backup/postgres
-        ${pkgs.sudo}/bin/sudo -u postgres ${pkgs.postgresql}/bin/pg_dump nextcloud > /var/backup/postgres/nextcloud.sql
-      '';
-      postHook = ''
-        rm -f /var/backup/postgres/nextcloud.sql
-      '';
-    };
   };
 
   distrust.services."nextcloud" = {
@@ -140,5 +110,12 @@ in {
 
       file_server
     '';
+    backup = {
+      enable = true;
+      paths = [
+        "/var/lib/nextcloud"
+      ];
+      database = "nextcloud";
+    };
   };
 }