add SOPS, etc.

nixos/racknerd/minecraft.nix

@@ -1,4 +1,38 @@
-{pkgs, ...}: {
+{
+  config,
+  pkgs,
+  ...
+}: {
+  sops = {
+    defaultSopsFile = ../../secrets/restic.yaml;
+    age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
+    secrets = {
+      "b2-minecraft/env" = {};
+      "b2-minecraft/repo" = {};
+      "b2-minecraft/password" = {};
+      "b2-photos-s3/env" = {};
+    };
+  };
+  services.restic.backups = {
+    b2-minecraft = {
+      initialize = true;
+      environmentFile = config.sops.secrets."b2-minecraft/env".path;
+      repositoryFile = config.sops.secrets."b2-minecraft/repo".path;
+      passwordFile = config.sops.secrets."b2-minecraft/password".path;
+
+      paths = [
+        "/var/lib/minecraft"
+      ];
+      timerConfig = {
+        OnCalendar = "00:05";
+      };
+      pruneOpts = [
+        "--keep-daily 3"
+        "--keep-weekly 1"
+        "--keep-monthly 1"
+      ];
+    };
+  };
   services.minecraft-server = {
     enable = true;
     eula = true;