nixos-config/linux/quasar/zfs.nix
2025-08-10 01:22:19 -05:00

88 lines
2.2 KiB
Nix

{
config,
lib,
...
}: {
boot = {
loader.grub.zfsSupport = true;
zfs = {
extraPools = ["zarchive"];
requestEncryptionCredentials = ["zactive/main"];
};
};
services.zfs = {
autoScrub.enable = true;
trim.enable = true;
};
services.zrepl = {
enable = true;
settings = {
global = {
logging = [
{
type = "syslog";
level = "info";
format = "human";
}
];
};
jobs = let
archiveBaseName = "archive";
backupBaseName = "backup";
pushConfig = name: snapshot: grid: {
type = "push";
name = "push-${name}";
connect = {
type = "local";
listener_name = "${name}-listener";
client_identity = config.networking.hostName;
};
filesystems."zactive/main/home" = true;
send.encrypted = true;
snapshotting = snapshot;
pruning = {
keep_sender = [
{
type = "grid";
regex = "^zrepl-.*";
grid = lib.concatStringsSep " | " ["1x1h(keep=all)" "24x1h" "7x1d" "4x1w"];
}
];
keep_receiver = [
{
type = "grid";
regex = "^zrepl-.*";
grid = lib.concatStringsSep " | " grid;
}
];
};
replication.protection = {
initial = "guarantee_resumability";
incremental = "guarantee_incremental";
};
};
sinkConfig = name: dataset: {
type = "sink";
name = "sink-${name}";
serve = {
type = "local";
listener_name = "${name}-listener";
};
root_fs = dataset;
recv.placeholder.encryption = "off";
};
in [
(pushConfig archiveBaseName {
type = "periodic";
prefix = "zrepl-";
interval = "1h";
} ["1x1h(keep=all)" "30x1d" "52x1w"])
(pushConfig backupBaseName {type = "manual";} ["1x1h(keep=all)" "8x13w"])
(sinkConfig archiveBaseName "zarchive/snapshot")
(sinkConfig backupBaseName "zbackup/snapshot")
];
};
};
}