kopia-server

modules/containers/kopia-server.nix

@@ -0,0 +1,44 @@
+{ config, pkgs, lib, ... }:
+
+let
+  # All settings are defined here for easy editing
+  secretsFile   = "/etc/nixos/secrets/kopia.env";
+  #tlsCert       = "/home/death916/certs/pimox.bandicoot-skate.ts.net.crt";
+  #tlsKey        = "/home/death916/certs/pimox.bandicoot-skate.ts.net.key";
+  listenAddress = "0.0.0.0:51515";
+  dataDir       = "/var/lib/kopia";
+in
+{
+  options.services.kopia-server.enable = lib.mkEnableOption "Self-contained Kopia Server";
+
+  config = lib.mkIf config.services.kopia-server.enable {
+    systemd.services.kopia = {
+      description = "Kopia Backup Server";
+      wantedBy    = [ "multi-user.target" ];
+      after       = [ "network-online.target" ];
+
+      environment = {
+        KOPIA_CONFIG_PATH     = "${dataDir}/repository.config";
+        KOPIA_LOG_DIR         = "${dataDir}/logs";
+        KOPIA_CACHE_DIRECTORY = "${dataDir}/cache";
+      };
+
+      serviceConfig = {
+        Type            = "simple";
+        User            = "root";
+        EnvironmentFile = secretsFile;
+        ExecStart = ''
+          ${pkgs.kopia}/bin/kopia server start \
+            --disable-csrf-token-checks \
+            --address=${listenAddress} 
+  #          --tls-cert-file=${tlsCert} \
+ #           --tls-key-file=${tlsKey}
+        '';
+        Restart         = "on-failure";
+        ReadWritePaths  = [ dataDir ];
+      };
+
+      preStart = "mkdir -p ${dataDir}";
+    };
+  };
+}

nixos/homelab.nix

@@ -14,10 +14,10 @@
     ../modules/nixos/common/base.nix
     ../modules/nixos/homelab/user.nix
     ../modules/nixos/common/tailscale.nix
-    # ../modules/containers/kopia.nix
+    ../modules/containers/kopia-server.nix
   ];
 
-  #  config = {
-  # services.kopia.enable = true;
-  #};
+    config = {
+   services.kopia-server.enable = true;
+  };
 }