Configure borg backup for gitea

config/common/data/pubkeys/despondos_host_ed25519_key.pub

@@ -1 +1 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH+ZQk80BU/OdQfV990yrkFwvsLVbVZ2Itof/qwxjTn7
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG4C5OgZpxoF42L5rPqwejs+Q1ViN9TM9o/fEbpnPFtA

config/hosts/wind/configuration.nix

@@ -7,6 +7,7 @@
 		../../common/services/tailscale.nix
 		../../common/users.nix
 		./services/acme.nix
+		./services/borg.nix
 		./services/coturn.nix
 		./services/nginx.nix
 		./services/nitter.nix

config/hosts/wind/services/borg.nix

@@ -0,0 +1,16 @@
+{ config, ... }:
+
+{
+	services.borgbackup.jobs = {
+		gitea = {
+			paths = "/var/lib/gitea";
+			repo = "ssh://borg@despondos.nao.sh//mnt/slab/backup/wind/gitea";
+			encryption.mode = "repokey";
+			encryption.passCommand = "cat ${config.secrets.files.borg_pass_gitea.file}";
+			environment.BORG_RSH = "ssh -i ${config.secrets.files.ssh_key_gitea.file}";
+			compression = "auto,zstd";
+			startAt = "*-*-* 02:15:00";
+			user = "gitea";
+		};
+	};
+}

config/hosts/wind/services/gitea.nix

@@ -3,9 +3,6 @@
 {
   services.gitea = {
     enable = true;
-    domain = "git.graven.dev";
-    rootUrl = "https://git.graven.dev";
-    enableUnixSocket = true;
     appName = "Graven Gitea";
     settings = { "ui" = { "DEFAULT_THEME" = "arc-green"; }; };
     database = {
@@ -13,5 +10,8 @@
     };
     settings.service.DISABLE_REGISTRATION = true;
     settings.session.COOKIE_SECURE = true;
+    settings.server.DOMAIN = "git.graven.dev";
+    settings.server.ROOT_URL = "https://git.graven.dev";
+    settings.server.PROTOCOL = "http+unix";
   };
 }