Add missing borg backup config

27 files changed, 137 insertions, 1 deletions

diff --git a/systems/eldiron/base.nix b/systems/eldiron/base.nix
index 4546212..3213e70 100644
--- a/systems/eldiron/base.nix
+++ b/systems/eldiron/base.nix
@@ -137,12 +137,26 @@
     bucket = "global";
     hash = false;
     remotes = [ "attilax" ];
+    includedPaths = [
+      "acme"
+      "fail2ban"
+      "logrotate.status"
+      "systemd/backlight"
+      "systemd/catalog"
+      "systemd/random-seed"
+      "systemd/linger"
+      "systemd/timers"
+      "systemd/timesync"
+    ];
     ignoredPaths = [
       "udev"
       "portables"
       "machines"
       "nixos"
+      "udisks2"
       "nixos-containers"
+      "private/systemd"
+      "systemd/coredump"
     ];
   };
   myServices.buildbot.enable = true;
diff --git a/systems/eldiron/buildbot/default.nix b/systems/eldiron/buildbot/default.nix
index e86b081..8618ec4 100644
--- a/systems/eldiron/buildbot/default.nix
+++ b/systems/eldiron/buildbot/default.nix
@@ -15,6 +15,11 @@ in
   };
 
   config = lib.mkIf config.myServices.buildbot.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "buildbot/.ssh"
+      "buildbot/buildbot_key"
+      "buildbot/buildbot_hosts"
+    ];
     myEnv.buildbot.projects.test = {
       name = "test";
       workerPort = config.myEnv.ports.buildbot_test;
diff --git a/systems/eldiron/databases/mariadb.nix b/systems/eldiron/databases/mariadb.nix
index b4a6917..a6e7ca3 100644
--- a/systems/eldiron/databases/mariadb.nix
+++ b/systems/eldiron/databases/mariadb.nix
@@ -74,6 +74,9 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.ignoredPaths = [
+      "mysql"
+    ];
     networking.firewall.allowedTCPPorts = [ config.myEnv.databases.mysql.port ];
 
     # for adminer, ssl is implemented with mysqli only, which is
diff --git a/systems/eldiron/databases/postgresql.nix b/systems/eldiron/databases/postgresql.nix
index 721059a..573b173 100644
--- a/systems/eldiron/databases/postgresql.nix
+++ b/systems/eldiron/databases/postgresql.nix
@@ -95,6 +95,9 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.ignoredPaths = [
+      "postgresql"
+    ];
     networking.firewall.allowedTCPPorts = [ 5432 ];
 
     security.acme.certs."postgresql" = {
diff --git a/systems/eldiron/databases/redis.nix b/systems/eldiron/databases/redis.nix
index 1f57aa9..45b36d5 100644
--- a/systems/eldiron/databases/redis.nix
+++ b/systems/eldiron/databases/redis.nix
@@ -30,6 +30,10 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.ignoredPaths = [
+      "redis"
+      "spiped"
+    ];
     users.users.redis.uid = config.ids.uids.redis;
     users.groups.redis.gid = config.ids.gids.redis;
     services.redis.servers."" = {
diff --git a/systems/eldiron/dns.nix b/systems/eldiron/dns.nix
index 3d5aafa..2b369af 100644
--- a/systems/eldiron/dns.nix
+++ b/systems/eldiron/dns.nix
@@ -164,6 +164,10 @@ in
   config = let
     cfg = config.services.bind;
   in lib.mkIf config.myServices.dns.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "named"
+    ];
+
     myServices.chatonsProperties.hostings.dns-secondaire = {
       file.datetime = "2022-08-22T02:00:00";
       hosting = {
diff --git a/systems/eldiron/ejabberd/default.nix b/systems/eldiron/ejabberd/default.nix
index 463d255..a4ab82c 100644
--- a/systems/eldiron/ejabberd/default.nix
+++ b/systems/eldiron/ejabberd/default.nix
@@ -14,6 +14,9 @@ in
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "ejabberd"
+    ];
     myServices.dns.zones."immae.fr" = with config.myServices.dns.helpers;
       lib.mkMerge [
         {
diff --git a/systems/eldiron/gemini/default.nix b/systems/eldiron/gemini/default.nix
index fc21413..4ef4e5e 100644
--- a/systems/eldiron/gemini/default.nix
+++ b/systems/eldiron/gemini/default.nix
@@ -2,6 +2,9 @@
 {
   options.myServices.gemini.enable = lib.mkEnableOption "enable Gemini capsule";
   config = lib.mkIf config.myServices.gemini.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "gemini"
+    ];
     myServices.chatonsProperties.hostings.gemini = {
       file.datetime = "2022-08-27T18:00:00";
       hosting = {
diff --git a/systems/eldiron/irc.nix b/systems/eldiron/irc.nix
index c48a4b3..03ed8a1 100644
--- a/systems/eldiron/irc.nix
+++ b/systems/eldiron/irc.nix
@@ -14,6 +14,10 @@ in
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "bitlbee"
+      "private/bitlbee"
+    ];
     myServices.dns.zones."immae.eu".subdomains.irc =
       with config.myServices.dns.helpers; ips servers.eldiron.ips.main;
 
diff --git a/systems/eldiron/mail/default.nix b/systems/eldiron/mail/default.nix
index 4e13f6a..a6acce0 100644
--- a/systems/eldiron/mail/default.nix
+++ b/systems/eldiron/mail/default.nix
@@ -9,6 +9,10 @@
 
   options.myServices.mail.enable = lib.mkEnableOption "enable Mail services";
   config = lib.mkIf config.myServices.mail.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "opendkim"
+      "vhost/immae.eu"
+    ];
     myServices.mail.milters.enable = true;
     security.acme.certs."mail" = {
       postRun = lib.mkBefore ''
diff --git a/systems/eldiron/mail/dovecot.nix b/systems/eldiron/mail/dovecot.nix
index 9c9cd7c..a14e400 100644
--- a/systems/eldiron/mail/dovecot.nix
+++ b/systems/eldiron/mail/dovecot.nix
@@ -13,6 +13,14 @@ let
 in
 {
   config = lib.mkIf config.myServices.mail.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "dhparams"
+    ];
+    services.borgBackup.profiles.global.ignoredPaths = [
+      "vhost/.sieve_bin"
+      "vhost/.imapsieve_bin"
+      "dovecot"
+    ];
     myServices.dns.zones."immae.eu".subdomains =
       with config.myServices.dns.helpers;
       {
diff --git a/systems/eldiron/mail/postfix.nix b/systems/eldiron/mail/postfix.nix
index ce7615d..c526c84 100644
--- a/systems/eldiron/mail/postfix.nix
+++ b/systems/eldiron/mail/postfix.nix
@@ -10,6 +10,13 @@ in
     apply = builtins.mapAttrs (n: v: if builtins.isList v then builtins.concatStringsSep "," v else v);
   };
   config = lib.mkIf config.myServices.mail.enable {
+    services.borgBackup.profiles.global.ignoredPaths = [
+      "postfix/conf"
+      "postfix/data"
+    ];
+    services.borgBackup.profiles.global.includedPaths = [
+      "postfix/queue"
+    ];
     myServices.dns.zones."immae.eu" = with config.myServices.dns.helpers; lib.mkMerge [
       mailMX
       (mailCommon "immae.eu" true)
diff --git a/systems/eldiron/mail/rspamd.nix b/systems/eldiron/mail/rspamd.nix
index 8a2b5f3..2385991 100644
--- a/systems/eldiron/mail/rspamd.nix
+++ b/systems/eldiron/mail/rspamd.nix
@@ -11,6 +11,13 @@
       '';
   };
   config = lib.mkIf config.myServices.mail.enable {
+    services.borgBackup.profiles.global.ignoredPaths = [
+      "vhost/.rspamd/rspamd.log"
+      "vhost/scan_reported_mails.lock"
+    ];
+    services.borgBackup.profiles.global.includedPaths = [
+      "rspamd"
+    ];
     services.cron.systemCronJobs = let
       cron_script = pkgs.runCommand "cron_script" {
         buildInputs = [ pkgs.makeWrapper ];
diff --git a/systems/eldiron/mail/sympa.nix b/systems/eldiron/mail/sympa.nix
index 07175e8..9f57f0a 100644
--- a/systems/eldiron/mail/sympa.nix
+++ b/systems/eldiron/mail/sympa.nix
@@ -5,6 +5,24 @@ let
 in
 {
   config = lib.mkIf config.myServices.mail.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "sympa/spool/auth"
+      "sympa/spool/automatic"
+      "sympa/spool/bounce"
+      "sympa/spool/bulk"
+      "sympa/spool/moderation"
+      "sympa/spool/msg"
+      "sympa/spool/outgoing"
+      "sympa/spool/subscribe"
+      "sympa/spool/task"
+      "sympa/spool/tmp"
+      "sympa/spool/viewmail"
+      "sympa/etc"
+      "sympa/static_content"
+      "sympa/sympa_transport"
+      "sympa/sympa_transport.db"
+      "sympa/sympa_transport.db.bak"
+    ];
     myServices.dns.zones."immae.eu".emailPolicies."lists".receive = true;
     myServices.dns.zones."immae.eu".subdomains.lists =
       with config.myServices.dns.helpers; lib.mkMerge [
diff --git a/systems/eldiron/monitoring.nix b/systems/eldiron/monitoring.nix
index f3b9aeb..92d3b38 100644
--- a/systems/eldiron/monitoring.nix
+++ b/systems/eldiron/monitoring.nix
@@ -4,6 +4,9 @@ let
   emailCheck = monitoring.lib.emailCheck config.myEnv.monitoring.email_check;
 in
 {
+  config.services.borgBackup.profiles.global.includedPaths = [
+    "naemon"
+  ];
   config.myServices.monitoring.smartdDisks = [
     "ata-ST33000650NS_Z29540DM"
     "ata-ST33000650NS_Z296JGJ4"
diff --git a/systems/eldiron/pub/default.nix b/systems/eldiron/pub/default.nix
index 847e9d0..81c0c22 100644
--- a/systems/eldiron/pub/default.nix
+++ b/systems/eldiron/pub/default.nix
@@ -41,7 +41,8 @@ in
 
   config = lib.mkIf config.myServices.pub.enable {
     services.borgBackup.profiles.global.ignoredPaths = [
-      "pub/.nix-.*"
+      "pub/.nix-profile"
+      "pub/.nix-defexpr"
     ];
     myServices.dns.zones."immae.eu".subdomains.pub =
       with config.myServices.dns.helpers; ips servers.eldiron.ips.main;
diff --git a/systems/eldiron/tasks/default.nix b/systems/eldiron/tasks/default.nix
index 0772a5f..a68b56b 100644
--- a/systems/eldiron/tasks/default.nix
+++ b/systems/eldiron/tasks/default.nix
@@ -85,6 +85,12 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "taskserver/userkeys"
+      "taskserver/.is_initialized"
+      "taskserver/orgs/Immae/.imperative"
+      "taskserver/keys"
+    ];
     myServices.dns.zones."immae.eu".subdomains.task =
       with config.myServices.dns.helpers; ips servers.eldiron.ips.main;
 
diff --git a/systems/eldiron/vpn/default.nix b/systems/eldiron/vpn/default.nix
index a5cc423..be46fb6 100644
--- a/systems/eldiron/vpn/default.nix
+++ b/systems/eldiron/vpn/default.nix
@@ -48,6 +48,9 @@ in
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.ignoredPaths = [
+      "tinc"
+    ];
     myServices.dns.zones."immae.eu".subdomains.vpn = with config.myServices.dns.helpers;
       ips servers.eldiron.ips.main // {
         subdomains.gw.AAAA = [ "${config.myEnv.vpn.eldiron.prefix}:0:ffff:1" ];
diff --git a/systems/eldiron/websites/cloud/default.nix b/systems/eldiron/websites/cloud/default.nix
index 3f41efe..25343a7 100644
--- a/systems/eldiron/websites/cloud/default.nix
+++ b/systems/eldiron/websites/cloud/default.nix
@@ -9,6 +9,9 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.ignoredPaths = [
+      "nextcloud/nextcloud.log"
+    ];
     services.borgBackup.profiles.global.includedPaths = [
       "nextcloud/appdata_occ80acffb591"
       "nextcloud/files_external"
diff --git a/systems/eldiron/websites/default.nix b/systems/eldiron/websites/default.nix
index feecc31..a01141c 100644
--- a/systems/eldiron/websites/default.nix
+++ b/systems/eldiron/websites/default.nix
@@ -210,6 +210,10 @@ in
   options.myServices.websites.enable = lib.mkEnableOption "enable websites";
 
   config = lib.mkIf config.myServices.websites.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "php/sessions"
+      "redis-php-sessions"
+    ];
     myServices.dns.zones."immae.eu".subdomains = with config.myServices.dns.helpers;
       {
         games = ips servers.eldiron.ips.main;
diff --git a/systems/eldiron/websites/diaspora/default.nix b/systems/eldiron/websites/diaspora/default.nix
index c536446..cc64680 100644
--- a/systems/eldiron/websites/diaspora/default.nix
+++ b/systems/eldiron/websites/diaspora/default.nix
@@ -10,6 +10,9 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "diaspora_immae"
+    ];
     myServices.dns.zones."immae.eu".subdomains.diaspora =
       with config.myServices.dns.helpers; ips servers.eldiron.ips.main;
 
diff --git a/systems/eldiron/websites/ether/default.nix b/systems/eldiron/websites/ether/default.nix
index 3993553..478e66e 100644
--- a/systems/eldiron/websites/ether/default.nix
+++ b/systems/eldiron/websites/ether/default.nix
@@ -12,6 +12,10 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "etherpad-lite"
+      "private/etherpad-lite"
+    ];
     myServices.dns.zones."immae.eu".subdomains.ether =
       with config.myServices.dns.helpers; ips servers.eldiron.ips.main;
 
diff --git a/systems/eldiron/websites/games/terraforming-mars/default.nix b/systems/eldiron/websites/games/terraforming-mars/default.nix
index e90e72f..71a5168 100644
--- a/systems/eldiron/websites/games/terraforming-mars/default.nix
+++ b/systems/eldiron/websites/games/terraforming-mars/default.nix
@@ -6,6 +6,10 @@ in
 {
   options.myServices.websites.games.terraforming-mars.enable = lib.mkEnableOption "Enable Terraforming mars game";
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "private/terraforming-mars"
+      "terraforming-mars"
+    ];
     myServices.dns.zones."immae.eu".subdomains.games.subdomains.terraforming-mars = with config.myServices.dns.helpers;
       ips servers.eldiron.ips.main;
     myServices.chatonsProperties.services.terraforming-mars = {
diff --git a/systems/eldiron/websites/mail/default.nix b/systems/eldiron/websites/mail/default.nix
index e212cd2..c051895 100644
--- a/systems/eldiron/websites/mail/default.nix
+++ b/systems/eldiron/websites/mail/default.nix
@@ -67,6 +67,11 @@ in
     #  };
     #};
 
+    services.borgBackup.profiles.global.includedPaths = [
+      "rainloop"
+      "roundcubemail"
+    ];
+
     myServices.dns.zones."immae.eu".subdomains.mail =
       with config.myServices.dns.helpers; ips servers.eldiron.ips.main;
 
diff --git a/systems/eldiron/websites/peertube/default.nix b/systems/eldiron/websites/peertube/default.nix
index 0ebe4e7..5303d8f 100644
--- a/systems/eldiron/websites/peertube/default.nix
+++ b/systems/eldiron/websites/peertube/default.nix
@@ -9,6 +9,9 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "peertube"
+    ];
     myServices.dns.zones."immae.eu".subdomains.peertube =
       with config.myServices.dns.helpers; ips servers.eldiron.ips.main;
 
diff --git a/systems/eldiron/websites/tools/default.nix b/systems/eldiron/websites/tools/default.nix
index 7d8bf5e..9528b20 100644
--- a/systems/eldiron/websites/tools/default.nix
+++ b/systems/eldiron/websites/tools/default.nix
@@ -115,15 +115,22 @@ in {
       "duply"
       "kanboard"
       "ntfy"
+      "shaarli/data/log.txt"
     ];
     services.borgBackup.profiles.global.includedPaths = [
       "paste"
       "dokuwiki/conf"
       "dokuwiki/data"
       "phpbb"
+      "shaarli/data/datastore.php"
+      "shaarli/data/.htaccess"
+      "shaarli/data/ipbans.php"
+      "shaarli/data/config.json.php"
       "shaarli/cache"
       "shaarli/pagecache"
       "shaarli/tmp"
+      "ttrss"
+      "wallabag"
     ];
 
     myServices.chatonsProperties.services = {
diff --git a/systems/eldiron/websites/visio/default.nix b/systems/eldiron/websites/visio/default.nix
index 76d1960..0d2c96c 100644
--- a/systems/eldiron/websites/visio/default.nix
+++ b/systems/eldiron/websites/visio/default.nix
@@ -8,6 +8,9 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
+    services.borgBackup.profiles.global.includedPaths = [
+      "galene"
+    ];
     myServices.dns.zones."immae.eu".subdomains.visio =
       with config.myServices.dns.helpers; ips servers.eldiron.ips.main;