Josiah Kerley

{ config, pkgs, lib, ... }:
{
  imports = [
    ./services.nix
  ];
}

{ config, pkgs, lib, ... }:
{
  services = {
    postgresql = {
      enable = true;
      package = pkgs.postgresql_13;
      settings.timezone = config.time.timeZone;
      enableTCPIP = true;
      initialScript = pkgs.writeText "postgresql-init.sql" ''
        CREATE ROLE root LOGIN CREATEDB CREATEROLE;
      '';
    };
  };
}

...
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
    ];
...

...
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
      ./bacula/dir/main.nix
    ];
...

{ config, pkgs, lib, ... }:
{
  services = {
    postgresql = {
    ...
    };
    bacula-dir = {
      enable = true;
      name = "bacula-dir";
      password = "ChangeMe";
      port = 9101;
      tls.enable = false;
      extraConfig = ''
        Messages {
          Name = Daemon
          mailcommand = "${pkgs.bacula}/sbin/bsmtp -h localhost -f \"\(Bacula\) \<%r\>\" -s \"Bacula daemon message\" %r"
          operatorcommand = "/home/bacula/bin/bsmtp -h localhost
                -f \"\(Bacula\) %r\"
                -s \"Bacula: Intervention needed for %j\" %r"
          mail = sysop@lab = all, !skipped, !info
          #mail = sysop@lab = all
          console = all, !skipped, !saved
          operator = sysop@lab = all
          append = "/var/lib/bacula/bacula-messages-daemon.log" = all, !skipped
          catalog = all
        }
      '';
    };
  };
}

{ config, pkgs, lib, ... }:
{
  services = {
    postgresql = {
      enable = true;
      package = pkgs.postgresql_13;
      settings.timezone = config.time.timeZone;
      enableTCPIP = true;
      initialScript = pkgs.writeText "postgresql-init.sql" ''
        CREATE ROLE root LOGIN CREATEDB CREATEROLE;
      '';
    };
    bacula-dir = {
      enable = true;
      name = "bacula-dir";
      password = "ChangeMe!";
      port = 9101;
      tls.enable = false;
      extraConfig = ''
        Messages {
          Name = Daemon
          mailcommand = "${pkgs.bacula}/sbin/bsmtp -h localhost -f \"\(Bacula\) \<%r\>\" -s \"Bacula daemon message\" %r"
          operatorcommand = "/home/bacula/bin/bsmtp -h localhost
                -f \"\(Bacula\) %r\"
                -s \"Bacula: Intervention needed for %j\" %r"
          mail = sysop@lab = all, !skipped, !info
          console = all, !skipped, !saved
          operator = sysop@lab = all
          append = "/var/lib/bacula/bacula-messages-daemon.log" = all, !skipped
          catalog = all
        }

        Storage {
          Name = bacula-sd_file1
          Address = bacula.lab
          Password = "ChangeMe!"
          Device = File1
          Autochanger = yes
          Media Type = File
          Maximum Concurrent Jobs = 20
        }

        Pool {
          Name = FilePool
          Pool Type = Backup
          Label Format = "Vol-"
          Recycle = yes
          Auto Prune = yes
          Volume Retention = 15 days
          Storage = bacula-sd_file1
          Maximum Volume Bytes = 50G
          Maximum Volumes = 100
        }

        FileSet {
          Name = "DefaultSet"
          Include {
            File = /
            Options {
              Signature = MD5
              OneFS = no
            }
            Options {
              Exclude = yes
              WildDir = "*/.cache"
              WildDir = "*/Downloads"
            }
          }
          Exclude {
            File = /swapfile
            File = /var/lib/bacula
            File = /nix
            File = /tmp
            File = /dev
            File = /proc
            File = /sys
            File = /run
            File = /mnt
            File = /media
            File = /lost+found
            File = /var/log/journal
            File = /var/cache
            File = /var/lib/nginx/tmp
          }
        }

        Schedule {
          Name = "StandardCycle"
          Run = Incremental mon-sun at 10:00
          Run = Full monthly at 17:00
        }

        JobDefs {
          Name = "BaseJob"
          Type = Backup
          Messages = Standard
          Priority = 30
          Pool = FilePool
          FileSet = "DefaultSet"
          Schedule = "StandardCycle"
          Write Bootstrap = "/var/lib/bacula/bootstrap-records/%c.bsr"
        }

        Job {
          Name = "bacula backup DefaultSet"
          JobDefs = "BaseJob"
          Client = bacula-fd = all
          FileSet = "DefaultSet"
        }

        Client {
          Name = bacula-fd
          Catalog = PostgreSQL
          Address = bacula.lab
          Password = "ChangeMe!"
        }
      '';
    };
  };

  systemd.services.bacula-dir = {
    serviceConfig = {
      ExecStartPre = [ "-${pkgs.coreutils}/bin/chown -R bacula:bacula /var/lib/bacula" ];
      ExecStartPost = [ "${pkgs.coreutils}/bin/chown -R bacula:bacula /var/lib/bacula" ];
    };
    path = [ pkgs.bacula pkgs.coreutils pkgs.su pkgs.postgresql_13 ];
  };

  environment.etc."bacula/bconsole.conf".text = ''
    Director {
      Name = bacula-dir
      address = localhost
      Password = "ChangeMe!"
    }
  '';

}