From 1efd3d4f0a420cd0d6f35cc7bfc9313fd019d4be Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Tue, 23 Jan 2024 05:27:43 +0100
Subject: [PATCH] tsuki/kanidm: set up backups

---
 hosts/tsuki/services/kanidm.nix | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/hosts/tsuki/services/kanidm.nix b/hosts/tsuki/services/kanidm.nix
index 7a8765b..ac201b2 100644
--- a/hosts/tsuki/services/kanidm.nix
+++ b/hosts/tsuki/services/kanidm.nix
@@ -11,6 +11,9 @@ in {
       "fullchain.pem:${certDir}/fullchain.pem"
       "key.pem:${certDir}/key.pem"
     ];
+    serviceConfig.BindPaths = [
+      cfg.serverSettings.online_backup.path
+    ];
   };
 
   services.kanidm = {
@@ -23,7 +26,11 @@ in {
       domain = "auth.nani.wtf";
       tls_chain = "${credsDir}/fullchain.pem";
       tls_key = "${credsDir}/key.pem";
-      bindaddress = "localhost:8300";
+      online_backup = {
+        path = "/data/backup/kanidm";
+        schedule = "00 22 * * *";
+        versions = 10;
+      };
     };
   };