oysteikt/nix-dotfiles
oysteikt
/
nix-dotfiles
2
1
Fork 0
Code Issues Pull Requests Activity

tsuki/kanidm: set up backups

This commit is contained in:
Oystein Kristoffer Tveit 2024-01-23 05:27:43 +01:00
parent 851d0c1fd0
commit 1efd3d4f0a
Signed by: oysteikt
GPG Key ID: 9F2F7D8250F35146
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
hosts/tsuki/services/kanidm.nix
View File

@ -11,6 +11,9 @@ in {
"fullchain.pem:${certDir}/fullchain.pem" "fullchain.pem:${certDir}/fullchain.pem"
"key.pem:${certDir}/key.pem" "key.pem:${certDir}/key.pem"
]; ];
serviceConfig.BindPaths = [
cfg.serverSettings.online_backup.path
];
}; };
services.kanidm = { services.kanidm = {
@ -23,7 +26,11 @@ in {
domain = "auth.nani.wtf"; domain = "auth.nani.wtf";
tls_chain = "${credsDir}/fullchain.pem"; tls_chain = "${credsDir}/fullchain.pem";
tls_key = "${credsDir}/key.pem"; tls_key = "${credsDir}/key.pem";
bindaddress = "localhost:8300"; online_backup = {
path = "/data/backup/kanidm";
schedule = "00 22 * * *";
versions = 10;
};
}; };
}; };