···

       
8
       
8
       
 
       
  users = {

     

       
9
       
9
       
 
       
    users.backup = {

     

       
10
       
10
       
 
       
      isNormalUser = true;

     

       
11
       
11
       
+
       
      group = "backup";

     

       
11
       
12
       
 
       
      shell = pkgs.bashInteractive;

     

       
12
       
13
       
 
       
      packages = with pkgs; [ rsync ];

     

       
13
       
14
       
 
       
      openssh.authorizedKeys.keyFiles = lib.singleton (inputs.self + "/creds/ssh/users/backup");

     
···

       
25
       
26
       
 
       
        ${lib.getExe pkgs.btrfs-progs} subvolume create /home/backup

     

       
26
       
27
       
 
       
      fi

     

       
27
       
28
       
 
       


     

       
28
       
28
       
-
       
      chown backup /home/backup

     

       
29
       
29
       
+
       
      chown backup:backup /home/backup

     

       
29
       
30
       
 
       
      chmod 0550 /home/backup

     

       
30
       
30
       
-
       
      install -dm755 /home/backup/public

     

       
31
       
31
       
-
       
      install -dm700 /home/backup/private

     

       
31
       
31
       
+
       
      install -dm755 -o backup -g backup /home/backup/public

     

       
32
       
32
       
+
       
      install -dm700 -o backup -g backup /home/backup/private

     

       
32
       
33
       
 
       
    '';

     

       
33
       
34
       
 
       
  };

     

       
34
       
35
       
 
       


     

       
35
       
36
       
 
       
  systemd = {

     

       
36
       
37
       
 
       
    services."snapshot-backup" = {

     

       
38
       
38
       
+
       
      path = [ pkgs.btrfs-progs ];

     

       
37
       
39
       
 
       
      script = ''

     

       
38
       
40
       
 
       
        NOW=$(date -u +%Y%m%d.%H%M%S)

     

       
39
       
41
       
 
       
        DATA_PATH=/home/backup/public