init

modules/system/backups.nix

@@ -0,0 +1,33 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}: {
+  services.restic.backups.hermes = {
+    initialize = true;
+
+    repository = "/mnt/backups/";
+
+    passwordFile = config.age.secrets.restic.path;
+
+    paths = [
+      "/var/lib"
+    ];
+
+    timerConfig = {
+      OnCalendar = "daily";
+      RandomizedDelaySec = "1h";
+    };
+
+    pruneOpts = [
+      "--keep-daily=7"
+      "--keep-weekly=4"
+      "--keep-monthly=12"
+    ];
+  };
+
+  age.secrets.restic = {
+    file = ../../secrets/restic.age;
+  };
+}

modules/system/garbage-collection.nix

@@ -0,0 +1,16 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}: {
+  nix = {
+    gc = {
+      automatic = true;
+      dates = "weekly";
+      options = "--delete-older-than 30d";
+    };
+
+    optimise.automatic = true;
+  };
+}