Add borgmatic

container-config/borgmatic/config.yaml

@@ -0,0 +1,12 @@
+source_directories:
+  - /run/host/etc
+  - /run/host/var/lib/container-data
+  - /run/host/var/lib/containers/storage/secrets
+  - /run/host/var/lib/containers/storage/volumes
+  - /run/host/root
+exclude_patterns:
+  - /run/host/var/lib/containers/storage/volumes/systemd-monero
+keep_daily: 7
+keep_weekly: 4
+keep_monthly: 3
+<<: !include /etc/borgmatic/local.yaml

container-config/forgejo/app.ini

@@ -19,3 +19,5 @@ INTERNAL_TOKEN_URI = file:/run/secrets/forgejo-token
 JWT_SECRET_URI = file:/run/secrets/forgejo-jwt-secret
 [indexer]
 REPO_INDEXER_ENABLED = true
+[cron]
+ENABLED = true

home/etc/containers/systemd/borgmatic.container.d/override.conf

@@ -0,0 +1,2 @@
+[Install]
+WantedBy=multi-user.target

server/etc/containers/systemd/borgmatic.container

@@ -0,0 +1,14 @@
+[Container]
+Image=ghcr.io/borgmatic-collective/borgmatic
+SecurityLabelDisable=true
+UserNS=host
+HostName=borgmatic
+Volume=/var/lib/system-config/container-config/borgmatic/config.yaml:/etc/borgmatic/config.yaml:z,ro
+Volume=/var/lib/container-data/borgmatic.yaml:/etc/borgmatic/local.yaml:z,ro
+Volume=/:/run/host:ro
+Volume=borgmatic-cache.volume:/root/.cache/borg:U,Z
+Volume=borgmatic-config.volume:/root/.config/borg:U,Z
+Volume=borgmatic-ssh.volume:/root/.ssh:U,Z
+Tmpfs=/etc/crontabs
+Environment=BACKUP_CRON="0 0 * * *"
+AutoUpdate=registry

setup-qubes-fedora.sh

@@ -2,7 +2,7 @@
 set -e
 cp -R desktop/* qubes-fedora/* /
 dnf config-manager --set-enabled qubes-vm-r4.2-security-testing qubes-vm-r4.2-current-testing
-dnf install --allowerasing bash-color-prompt bash-completion bind-utils butane default-fonts fcitx5-anthy fcitx5-autostart fedora-flathub-remote file-roller fuse-sshfs gcc gcc-gdb-plugin glibc-all-langpacks helm htop kubernetes-client nautilus netcat nodejs-npm pipx qubes-ctap ShellCheck toolbox wireguard-tools whois xdg-desktop-portal-gtk yt-dlp
+dnf install --allowerasing bash-color-prompt bash-completion borgbackup bind-utils butane default-fonts fcitx5-anthy fcitx5-autostart fedora-flathub-remote file-roller fuse-sshfs gcc gcc-gdb-plugin glibc-all-langpacks helm htop kubernetes-client nautilus netcat nodejs-npm pipx qubes-ctap ShellCheck toolbox wireguard-tools whois xdg-desktop-portal-gtk yt-dlp
 dnf remove cheese evolution-data-server firefox gnome-software gnome-weather PackageKit-command-not-found rpmfusion-nonfree-release thunderbird totem
 sh setup-desktop.sh
 all_proxy=127.0.0.1:8082 flatpak remote-add --if-not-exists flathub /usr/lib/fedora-third-party/conf.d/fedora-flathub.flatpakrepo

vps/etc/containers/systemd/borgmatic.container.d/override.conf

@@ -0,0 +1,2 @@
+[Install]
+WantedBy=multi-user.target