X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprivate%2Fsystem%2Fbackup-2.nix;h=1b7f136c76bca46e89bacb988dfc3ace93fdfa46;hb=16b80abd57bb215d0e72f3983f997a007743b8fb;hp=615167150a10c27b4788fd90bc463f078d75e006;hpb=285380fe566700ab3bf4f69b0a1a10fb4d9bba3a;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/private/system/backup-2.nix b/modules/private/system/backup-2.nix index 6151671..1b7f136 100644 --- a/modules/private/system/backup-2.nix +++ b/modules/private/system/backup-2.nix @@ -3,6 +3,7 @@ { boot.kernelPackages = pkgs.linuxPackages_latest; _module.args.privateFiles = privateFiles; + _module.args.hostFQDN = "backup-2.v.immae.eu"; imports = builtins.attrValues (import ../..); deployment = { @@ -48,6 +49,58 @@ ssh_key_private = myconfig.env.rsync_backup.ssh_key.private; }; + myServices.monitoring.enable = true; + myServices.databasesReplication = { + postgresql = { + enable = true; + base = "/backup2"; + hosts = { + eldiron = { + slot = "backup_2"; + connection = "postgresql://backup-2:${myconfig.env.ldap.backup-2.password}@eldiron.immae.eu"; + }; + }; + }; + mariadb = { + enable = true; + base = "/backup2"; + hosts = { + eldiron = { + serverId = 2; + # mysql resolves "backup-2" host and checks the ip, but uses /etc/hosts which only contains ip4 + host = myconfig.env.servers.eldiron.ips.main.ip4; + port = "3306"; + user = "backup-2"; + password = myconfig.env.ldap.backup-2.password; + dumpUser = "root"; + dumpPassword = myconfig.env.databases.mysql.systemUsers.root; + }; + }; + }; + redis = { + enable = true; + base = "/backup2"; + hosts = { + eldiron = { + host = "127.0.0.1"; + port = "16379"; + }; + }; + }; + openldap = { + enable = true; + base = "/backup2"; + hosts = { + eldiron = { + url = "ldaps://${myconfig.env.ldap.host}:636"; + dn = myconfig.env.ldap.replication_dn; + password = myconfig.env.ldap.replication_pw; + base = myconfig.env.ldap.base; + }; + }; + }; + }; + # This value determines the NixOS release with which your system is # to be compatible, in order to avoid breaking some software such as # database servers. You should change this only after NixOS release