backwards/manatee: Move restic backup to mantee

hosts/manatee/modules/default.nix

@@ -16,6 +16,7 @@ in
 
       nginx.enable = true;
       syncthing.enable = true;
+      restic.enable = true;
       transmission.enable = true;
       audiobookshelf.enable = true;
       jellyfin.enable = true;

hosts/manatee/modules/restic/default.nix

@@ -0,0 +1,56 @@
+{ lib, config, ... }:
+let
+  enabled = config.mod.restic.enable;
+in
+{
+  options.mod.restic.enable = lib.mkEnableOption "Enable restic";
+
+  config = lib.mkIf enabled {
+    fileSystems."/mnt/backup" = {
+      device = "/dev/disk/by-uuid/34601701-65e6-4b2c-ac4d-8bef3dfd743f";
+      fsType = "ext4";
+      options = [ "nofail" ];
+    };
+
+    services.restic.backups = {
+      "sync-to-external" = {
+        initialize = true;
+        passwordFile = config.age.secrets.restic-password.path;
+        paths = [ "/mnt/sync/public" ];
+        repository = "/mnt/backup/restic";
+        timerConfig = {
+          OnCalendar = "*-*-* 0/12:00:00";
+          Persistent = true;
+        };
+        pruneOpts = [
+          "--keep-daily 1"
+          "--keep-weekly 7"
+          "--keep-yearly 12"
+        ];
+      };
+
+      "sync-to-cloud" = {
+        initialize = true;
+        passwordFile = config.age.secrets.restic-password.path;
+        environmentFile = config.age.secrets.restic-cloud-sync-key.path;
+        repositoryFile = config.age.secrets.restic-cloud-sync-repository.path;
+        paths = [ "/mnt/sync/public" ];
+        timerConfig = {
+          OnCalendar = "*-*-* 0/12:00:00";
+          Persistent = true;
+        };
+        pruneOpts = [
+          "--keep-daily 1"
+          "--keep-weekly 7"
+          "--keep-yearly 12"
+        ];
+      };
+    };
+
+    age.secrets = {
+      "restic-password".file = ../../../../secrets/manatee/restic-password.age;
+      "restic-cloud-sync-key".file = ../../../../secrets/manatee/restic-cloud-sync-key.age;
+      "restic-cloud-sync-repository".file = ../../../../secrets/manatee/restic-cloud-sync-repository.age;
+    };
+  };
+}