From 01246a78a818ce1bf4838069ae183dc36f55a24b Mon Sep 17 00:00:00 2001
From: Gonne <gonne@mathebau.de>
Date: Wed, 7 Feb 2024 15:21:15 +0100
Subject: [PATCH] Backup des Fachschaftsaccounts

---
 nixos/modules/borgbackup.nix | 38 ++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)

diff --git a/nixos/modules/borgbackup.nix b/nixos/modules/borgbackup.nix
index d019756..2e47656 100644
--- a/nixos/modules/borgbackup.nix
+++ b/nixos/modules/borgbackup.nix
@@ -56,6 +56,13 @@ in {
           path = "/var/lib/backups/eihort";
           allowSubRepos = true;
         };
+        fsaccount = {
+          authorizedKeysAppendOnly = [
+            "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG+Y7fQTYdIWHehrKdk92CaJ0AisEux4OrS4nIyMstU4 FS Account Backup"
+          ];
+          path = "/var/lib/backups/fsaccount";
+          allowSubRepos = true;
+        };
         hastur = {
           authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILeDvTyOUdIPARatX0PPhHgrV1gjERWLt2Twa8E2GETb Hastur Backupsystem"
@@ -99,6 +106,37 @@ in {
           allowSubRepos = true;
         };
       };
+      # Configure backup of files on the department's fs account
+      jobs.fsaccount = {
+        preHook = ''
+          rm -rf /home/fsaccount/sicherung
+          mkdir /home/fsaccount/sicherung
+          scp -i /home/fsaccount/.ssh/fsaccount -r fachschaft@gw1.mathematik.tu-darmstadt.de:/home/fachschaft/* /home/fsaccount/sicherung/
+        '';
+        paths = "/home/fsaccount/sicherung";
+        encryption.mode = "none";
+        environment.BORG_RSH = "ssh -i /home/fsaccount/.ssh/fsaccount";
+        repo = "ssh://borg@localhost:fsaccount";
+        startAt = "hourly";
+        user = "fsaccount";
+        group = "users";
+        readWritePaths = ["/home/fsaccount"];
+      };
+    };
+    environment.persistence.${config.impermanence.name} = {
+      users.fsaccount.directories = [
+        {
+          directory = ".ssh"; # SSH Key with access to FS Account and Borg repo and known_hosts
+          mode = "u=rwx,g=,o=";
+        }
+      ];
+    };
+    # Extra user for FS account backup
+    users.users = {
+      fsaccount = {
+        description = "FS Account backup";
+        isNormalUser = true;
+      };
     };
   };
 }