Add automated backups to backblaze with restic

flake.lock

@@ -84,40 +84,6 @@
         "type": "github"
       }
     },
-    "flake-compat": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1673956053,
-        "narHash": "sha256-4gtG9iQuiKITOjNQQeQIpoIB6b16fm+504Ch3sNKLd8=",
-        "owner": "edolstra",
-        "repo": "flake-compat",
-        "rev": "35bb57c0c8d8b62bbfd284272c928ceb64ddbde9",
-        "type": "github"
-      },
-      "original": {
-        "owner": "edolstra",
-        "repo": "flake-compat",
-        "type": "github"
-      }
-    },
-    "flake-utils": {
-      "inputs": {
-        "systems": "systems"
-      },
-      "locked": {
-        "lastModified": 1681202837,
-        "narHash": "sha256-H+Rh19JDwRtpVPAWp64F+rlEtxUWBAQW28eAi3SRSzg=",
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "rev": "cfacdce06f30d2b68473a46042957675eebb3401",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "type": "github"
-      }
-    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -159,28 +125,6 @@
         "type": "github"
       }
     },
-    "nix-minecraft": {
-      "inputs": {
-        "flake-compat": "flake-compat",
-        "flake-utils": "flake-utils",
-        "nixpkgs": [
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1702430423,
-        "narHash": "sha256-jJ2ZisjJ8ubQlBJcK9xTu2vqoqUtMw9OcxIhxmNz1BA=",
-        "owner": "Infinidoge",
-        "repo": "nix-minecraft",
-        "rev": "1af073ceea9c77a475fe6bac682b6d14646234fe",
-        "type": "github"
-      },
-      "original": {
-        "owner": "Infinidoge",
-        "repo": "nix-minecraft",
-        "type": "github"
-      }
-    },
     "nixos-hardware": {
       "locked": {
         "lastModified": 1702453208,
@@ -219,28 +163,12 @@
         "aurora-blog-template": "aurora-blog-template",
         "denbot": "denbot",
         "home-manager": "home-manager_2",
-        "nix-minecraft": "nix-minecraft",
         "nixos-hardware": "nixos-hardware",
         "nixpkgs": "nixpkgs",
         "todos": "todos",
         "website": "website"
       }
     },
-    "systems": {
-      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-        "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default",
-        "type": "github"
-      }
-    },
     "todos": {
       "inputs": {
         "nixpkgs": [

flake.nix

@@ -28,10 +28,6 @@
       url = "github:ryantm/agenix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    nix-minecraft = {
-      url = "github:Infinidoge/nix-minecraft";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
   };
 
   outputs = inputs@{ nixpkgs, home-manager, ... }: {

nixos-configurations/server/default.nix

@@ -3,18 +3,20 @@
 {
   imports = [
     inputs.agenix.nixosModules.default
-    inputs.nix-minecraft.nixosModules.minecraft-servers
     ./hardware-configuration.nix
     ../shared.nix
   ];
 
-  nixpkgs.overlays = [ inputs.nix-minecraft.overlay ];
-
   nix.settings.trusted-users = [ "thiloho" ];
 
-  age.secrets.hedgedoc-environment-file.file = ../../secrets/hedgedoc-environment-file.age;
+  age.secrets = {
-  age.secrets.discord-bot-token.file = ../../secrets/discord-bot-token.age;
+    hedgedoc-environment-file.file = ../../secrets/hedgedoc-environment-file.age;
-  age.secrets.todos-environment-file.file = ../../secrets/todos-environment-file.age;
+    discord-bot-token.file = ../../secrets/discord-bot-token.age;
+    todos-environment-file.file = ../../secrets/todos-environment-file.age;
+    "restic/minecraft-environment-file".file = ../../secrets/restic/minecraft-environment-file.age;
+    "restic/minecraft-repository".file = ../../secrets/restic/minecraft-repository.age;
+    "restic/password".file = ../../secrets/restic/password.age;
+  };
 
   environment.systemPackages = with pkgs; [
     nodejs_20
@@ -33,330 +35,23 @@
       enable = true;
       settings.PasswordAuthentication = false;
     };
-    minecraft-servers = {
+    minecraft-server = {
       enable = true;
       eula = true;
-      servers = {
+      declarative = true;
-        thilo = {
-          enable = true;
-          autoStart = true;
-          package = pkgs.paperServers.paper-1_20_1;
-          enableReload = true;
       openFirewall = true;
       whitelist = {
         thilo_ho = "4e4d744d-7748-46bc-add8-b3e8ca3b4cf5";
         PegasusIsHere = "24155f74-eb04-4f45-a743-f2b7eb71c6a2";
         BakaZaps = "1888532c-6df7-4514-b96a-99ed4e7684f2";
         Liaxswan = "ccbf3468-a6b4-4d7b-9837-5a2451deca79";
-            rayboo120 = "c65f9422-b972-4583-82b5-2e5a12e789fd";
-            AmValo = "a5f4a7d9-daf2-4ec9-b1c9-e39efdfb331e";
-            TubiCFW = "fbbd217b-cf9f-404a-a0b4-671155d43222";
-            TheRacccooon = "f3a639f2-b82c-49c2-80e5-ccd5cbdc9541";
-            _Zyronx = "865f911f-66ae-479f-a65a-8140da82b96e";
       };
       serverProperties = {
         difficulty = 3;
-            max-players = 20;
+        max-players = 10;
-            motd = "§aThilo's survival server";
+        motd = "Thilo's SMP";
         white-list = false;
       };
-          files = {
-            "ops.json".value = [
-              {
-                uuid = "4e4d744d-7748-46bc-add8-b3e8ca3b4cf5";
-                name = "thilo_ho";
-                level = 4;
-              }
-            ];
-            "config/paper-world-defaults.yml".value = {
-              anticheat = {
-                anti-xray = {
-                  enabled = true;
-                  engine-mode = 2;
-                };
-              };
-            };
-            "plugins/TAB/config.yml".value = {
-              header-footer = {
-                enabled = true;
-                header = [
-                  "<#FFFFFF>&mx                                     x"
-                  ""
-                  "&aThilo's survival server"
-                  "&7Online players: &f%online%"
-                  ""
-                ];
-                footer = [
-                  ""
-                  "<#FFFFFF>&mx                                     x"
-                ];
-              };
-              scoreboard-teams = {
-                sorting-types = [
-                  "GROUPS:admin,mod,premium,default"
-                ];
-              };
-              yellow-number-in-tablist = {
-                enabled = false;
-              };
-            }; 
-            "plugins/TAB/groups.yml".value = {
-              _DEFAULT_ = {
-                tabprefix = "%luckperms-prefix%";
-                tagprefix = "%luckperms-prefix%";
-                tabsuffix = "%luckperms-suffix%";
-                tagsuffix = "%luckperms-suffix%";
-              };
-            };
-            "plugins/Essentials/config.yml".value = {
-              ops-name-color = "none";
-              chat = {
-                format = "{PREFIX}&f{USERNAME}&8: {SUFFIX}{MESSAGE}";
-              };
-              teleport-cooldown = 90;
-              teleport-delay = 5;
-              teleport-invulnerability = 5;
-              sethome-multiple = {
-                "premium" = 2;
-              };
-            };
-            "plugins/LuckPerms/config.yml".value = {
-              storage-method = "yaml";
-            };
-            /*
-            "plugins/LuckPerms/yaml-storage/users/4e4d744d-7748-46bc-add8-b3e8ca3b4cf5.yml".value = {
-              uuid = "4e4d744d-7748-46bc-add8-b3e8ca3b4cf5";
-              name = "thilo_ho";
-              primary-group = "admin";
-              parents = [
-                "admin"
-              ];
-            };
-            */
-            "plugins/LuckPerms/yaml-storage/groups/admin.yml".value = {
-              name = "admin";
-              permissions = [
-                "weight.100"
-                "essentials.*"
-                "luckperms.*"
-                "tab.admin"
-                "minecraft.command.*"
-                "bukkit.command.*"
-              ];
-              prefixes = [
-                {
-                  "&8[&cAdmin&8] &f" = {
-                    priority = 100;
-                  };
-                }
-              ];
-              suffixes = [
-                {
-                  "&c" = {
-                    priority = 100;
-                  };
-                }
-              ];
-            };
-            "plugins/LuckPerms/yaml-storage/groups/mod.yml".value = {
-              name = "mod";
-              parents = [ "default" "premium" ];
-              permissions = [
-                "weight.90"
-                "essentials.kick"
-                "essentials.kick.notify"
-                "essentials.ban"
-                "essentials.ban.notify"
-                "essentials.tempban"
-                "essentials.unban"
-                "essentials.mute"
-                "essentials.tempmute"
-                "essentials.unmute"
-                "essentials.fly"
-                "essentials.vanish"
-                "essentials.socialspy"
-                "essentials.seen"
-                "essentials.seen.alts"
-                "essentials.seen.banreason"
-                "essentials.invsee"
-                "essentials.tp"
-                "essentials.tpoffline"
-              ];
-              prefixes = [
-                {
-                  "&8[&dMod&8] &f" = {
-                    priority = 90;
-                  };
-                }
-              ];
-              suffixes = [
-                {
-                  "&d" = {
-                    priority = 90;
-                  };
-                }
-              ];
-            };
-            "plugins/LuckPerms/yaml-storage/groups/premium.yml".value = {
-              name = "premium";
-              parents = [ "default" ];
-              permissions = [
-                "weight.20"
-                "essentials.sethome.multiple.premium"
-              ];
-              prefixes = [
-                {
-                  "&8[&6Premium&8] &f" = {
-                    priority = 20;
-                  };
-                }
-              ];
-              suffixes = [
-                {
-                  "&f" = {
-                    priority = 20;
-                  };
-                }
-              ];
-            };
-            "plugins/LuckPerms/yaml-storage/groups/default.yml".value = {
-              name = "default";
-              permissions = [
-                {
-                  "bukkit.command.version" = {
-                    value = false;
-                  };
-                }
-                {
-                  "bukkit.command.plugins" = {
-                    value = false;
-                  };
-                }
-                {
-                  "bukkit.command.help" = {
-                    value = false;
-                  };
-                }
-                "weight.10"
-                "essentials.tpr"
-                "essentials.spawn"
-                "essentials.motd"
-                "essentials.help"
-                "essentials.balance"
-                "essentials.afk"
-                "essentials.list"
-                "essentials.mail"
-                "essentials.mail.send"
-                "essentials.msg"
-                "essentials.sethome"
-                "essentials.home"
-                "essentials.delhome"
-                "essentials.tpa"
-                "essentials.tpaccept"
-                "essentials.tpdeny"
-              ];
-              prefixes = [
-                {
-                  "&8[&aUser&8] &f" = {
-                    priority = 10;
-                  };
-                }
-              ];
-              suffixes = [
-                {
-                  "&7" = {
-                    priority = 10;
-                  };
-                }
-              ];
-            };
-            "plugins/GriefPreventionData/config.yml".value = {
-              GriefPrevention = {
-                Spam = {
-                  WarningMessage = "Please refrain from spamming.";
-                  BanOffenders = false;
-                };
-              };
-            };
-            "plugins/Essentials/motd.txt" = pkgs.writeText "motd.txt" ''
-              &m                                                                  
-              &6Welcome, {PLAYER}&6!
-              &6Type &c/help&6 for a list of commands.
-              &6Type &c/list&6 to see who else is online.
-              &6Players online:&c {ONLINE} &6- World time:&c {WORLDTIME12}
-              &6Discord server: &chttps://discord.gg/SX7fXrDtth
-              &m                                                                  
-            '';
-          };
-          symlinks = {
-            "server-icon.png" = pkgs.fetchurl {
-              url = "https://cdn.discordapp.com/attachments/1142193094729662627/1179544663884046468/server-icon-new.png?ex=657a2b92&is=6567b692&hm=e89f98dc64f027cead19a65d8de5baba14f062ca72d71879bf92eee3b23f0ffc&";
-              sha256 = "sha256-nhSGxBvsHbMFsej99RIIQUk5PfP1ErGvBHErhcQHcQ8=";
-            };
-            "plugins/TAB.jar" = pkgs.fetchurl rec {
-              pname = "TAB";
-              version = "4.0.9";
-              url = "https://github.com/NEZNAMY/${pname}/releases/download/${version}/${pname}.v${version}.jar";
-              sha256 = "sha256-xXr7Pc/T+6YfoFUpi2tq09FzCxRp/m8GFQs5qDMkqmc=";
-            };
-            "plugins/LuckPerms.jar" = pkgs.fetchurl rec {
-              pname = "LuckPerms";
-              version = "5.4.108";
-              url = "https://download.luckperms.net/1521/bukkit/loader/LuckPerms-Bukkit-${version}.jar";
-              sha256 = "sha256-TN7HH/5JiG98xBACfuoJZILsiDxU8WX5laNDS3h+qR4=";
-            };
-            "plugins/Vault.jar" = pkgs.fetchurl {
-              pname = "Vault";
-              version = "1.7.3";
-              url = "https://dev.bukkit.org/projects/vault/files/3007470/download";
-              sha256 = "sha256-prXtl/Q6XPW7rwCnyM0jxa/JvQA/hJh1r4s25s930B0=";
-            };
-            "plugins/EssentialsX.jar" = pkgs.fetchurl rec {
-              pname = "EssentialsX";
-              version = "2.20.1";
-              url = "https://github.com/EssentialsX/Essentials/releases/download/${version}/${pname}-${version}.jar";
-              sha256 = "sha256-gC6jC9pGDKRZfoGJJYFpM8EjsI2BJqgU+sKNA6Yb9UI=";
-            };
-            "plugins/EssentialsXChat.jar" = pkgs.fetchurl rec {
-              pname = "EssentialsXChat";
-              version = "2.20.1";
-              url = "https://github.com/EssentialsX/Essentials/releases/download/${version}/${pname}-${version}.jar";
-              sha256 = "sha256-QKpcICQc6zAH68tc+/Gb8sRnsMCQrlDnBlPuh6t3XKY=";
-            };
-            "plugins/EssentialsXSpawn.jar" = pkgs.fetchurl rec {
-              pname = "EssentialsXSpawn";
-              version = "2.20.1";
-              url = "https://github.com/EssentialsX/Essentials/releases/download/${version}/${pname}-${version}.jar";
-              sha256 = "sha256-ZQ18ajOGWgLF/6TrcQ3vKOc9lyya74WysfTnG5vSYaA=";
-            };
-            "plugins/GriefPrevention.jar" = pkgs.fetchurl {
-              pname = "GriefPrevention";
-              version = "16.18.1";
-              url = "https://dev.bukkit.org/projects/grief-prevention/files/4433061/download";
-              hash = "sha256-GwJLJAkrWt7UIMTPYMQ2pCu9/5rExx/a5r2BXuvndOs=";
-            };
-            "plugins/VoidGen.jar" = pkgs.fetchurl rec {
-              pname = "VoidGen";
-              version = "2.2.1";
-              url = "https://github.com/xtkq-is-not-available/${pname}/releases/download/v${version}/${pname}-${version}.jar";
-              hash = "sha256-nOEwEj3GcCXWAPdlvbL98c6nGTv4kg4+AhbF+PwILD4=";
-            };
-            "plugins/Multiverse-Core.jar" = pkgs.fetchurl rec {
-              pname = "Multiverse-Core";
-              version = "4.3.12";
-              url = "https://github.com/Multiverse/${pname}/releases/download/${version}/multiverse-core-${version}.jar";
-              hash = "sha256-mCN6rzXG7nv9lft/OZ73A7PnK/+Oq0iKkEqtnUUwzRA=";
-            };
-          };
-        };
-      };
-    };
-    terraria = {
-      enable = true;
-      maxPlayers = 10;
-      messageOfTheDay = "Terraria server of Thilo";
-      openFirewall = true;
-      secure = true;
     };
     nginx = {
       enable = true;
@@ -445,6 +140,25 @@
         local all      all    trust
       '';
     };
+    restic.backups = {
+      minecraft-backup = {
+        initialize = true;
+
+        environmentFile = config.age.secrets."restic/minecraft-environment-file".path;
+        repositoryFile = config.age.secrets."restic/minecraft-repository".path;
+        passwordFile = config.age.secrets."restic/password".path;
+
+        paths = [
+          "/var/lib/minecraft/world"
+        ];
+
+        pruneOpts = [
+          "--keep-daily 7"
+          "--keep-weekly 5"
+          "--keep-monthly 12"
+        ];
+      };
+    };
   };
 
   security = {

nixos-configurations/shared-desktop.nix

@@ -81,7 +81,6 @@
         prismlauncher
         ventoy-full
         psensor
-        spotify
         nil
         zoom-us
         teamspeak5_client
@@ -89,6 +88,7 @@
         qbittorrent
         neofetch
         godot_4
+        backblaze-b2
       ];
     };
   };

secrets/restic/minecraft-repository.age

@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 owVgDA wvUcfFupWO5SAjQAEPgsnzA/X9sZs1OKOtj2TbklwmU
+4ALAG2v7XDtmfxzMYPHWVpsS+AJjPClV6JXd1UShdJY
+-> ssh-ed25519 dRl0SQ +5YXwSUS1Sjm2m2ekhP9kQEUw8NId1WzMPg3PZ+3cQk
+39p6XM4GzHM8azI7yq+o1REscLv/10zRQsGtbLsa9b4
+-> 0+6U-grease V;Z uy r*_k
+Vkn3nufoGWiL2JadGeBB5WV7VnFeiKgC27sL5HBimNuk4q1K6zRG+mZcgFYs/N+r
+alQKxZe7BB3mUCrCbv12rtJRSXqcx3wXOri+t+ERljO5r5j+4x0EBRru2Gw
+--- c0FP/81ZSdLz7nwnjPA+ZDB515CUm7sYkvv4EQBbsMA
+ 9<>I<>}h<><68><1B><>kw쯱<77>t<EFBFBD>NS^<5E>1%<25>ɩ<><C9A9><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>PЩcN_<4E><5F><EFBFBD><EFBFBD><EFBFBD>nA<6E>
+<EFBFBD><EFBFBD>

secrets/restic/password.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 owVgDA uHkIaE0OZlf5lfboMt7G1SoTQju7V2KLhavgNUmmemI
+LsVhtV7olRXuoOpVlNtQ7/r9mgCk6GYUfH7USnSy8NY
+-> ssh-ed25519 dRl0SQ QBYcokbUHfBOYxtMQ3lxn8ovtakSq8mclBpef6mXJFk
+rwB3HTsbDtzin3UpLEnMzpkBIXMBhM3eS1gA5RkyX6c
+-> lW-grease H]~ U`GrO @pIL!eeO
+KGPJugVtnjtmhSTuModTRF8zu5+BIKA/vKns6hw
+--- KIqadbISsYbNfx/tVpsPV6YrjbgbWdGjqabBzg3lBdo
+<EFBFBD><EFBFBD>'{<7B>4O-%<25><>]<5D>UQ@<40><><EFBFBD>4<EFBFBD>y<EFBFBD><18>-<2D><><EFBFBD>5<EFBFBD>gh<05><><04>{D,<2C>ůF@p<><70><EFBFBD><EFBFBD>

secrets/secrets.nix

@@ -6,4 +6,7 @@ in
   "hedgedoc-environment-file.age".publicKeys = [ server pc ];
   "discord-bot-token.age".publicKeys = [ server pc ];
   "todos-environment-file.age".publicKeys = [ server pc ];
+  "restic/password.age".publicKeys = [ server pc ];
+  "restic/minecraft-environment-file.age".publicKeys = [ server pc ];
+  "restic/minecraft-repository.age".publicKeys = [ server pc ];
 }