build03, web02: backup postgresql

hosts/build03/postgresql.nix

@@ -1,6 +1,30 @@
-{ pkgs, ... }:
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}:
 
 {
+  imports = [
+    inputs.self.nixosModules.backup
+  ];
+
+  services.postgresqlBackup = {
+    enable = true;
+    compression = "none";
+    startAt = "daily";
+  };
+
+  nixCommunity.backup = [
+    {
+      name = "postgresql";
+      after = [ config.systemd.services.postgresqlBackup.name ];
+      paths = [ config.services.postgresqlBackup.location ];
+      startAt = "daily";
+    }
+  ];
+
   services.postgresql.ensureUsers = [ { name = "telegraf"; } ];
 
   systemd.services.postgresql.postStart = ''

hosts/web02/default.nix

@@ -2,6 +2,7 @@
 {
   imports = [
     ./gandi.nix
+    ./postgresql.nix
     inputs.self.nixosModules.monitoring
     inputs.self.nixosModules.nginx
   ];

hosts/web02/postgresql.nix

@@ -0,0 +1,31 @@
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}:
+{
+  imports = [
+    inputs.self.nixosModules.backup
+  ];
+
+  services.postgresqlBackup = {
+    enable = true;
+    compression = "none";
+    startAt = "daily";
+  };
+
+  nixCommunity.backup = [
+    {
+      name = "postgresql";
+      after = [ config.systemd.services.postgresqlBackup.name ];
+      paths = [ config.services.postgresqlBackup.location ];
+      startAt = "daily";
+    }
+  ];
+
+  services.postgresql = {
+    enable = true;
+    package = pkgs.postgresql_17;
+  };
+}

modules/nixos/monitoring/alert-rules.nix

@@ -5,6 +5,7 @@
       (lib.genAttrs
         [
           "borgbackup-job-github-org.service"
+          "borgbackup-job-postgresql.service"
         ]
         (name: {
           expr = ''absent_over_time(task_last_run{name="${name}"}[1d])'';

modules/nixos/monitoring/grafana.nix

@@ -1,9 +1,4 @@
-{
-  config,
-  inputs,
-  pkgs,
-  ...
-}:
+{ config, inputs, ... }:
 {
   systemd.services.grafana.after = [ config.systemd.services.prometheus.name ];
 
@@ -68,8 +63,6 @@
   ];
 
   services.postgresql = {
-    enable = true;
-    package = pkgs.postgresql_17;
     ensureDatabases = [ "grafana" ];
     ensureUsers = [
       {