From 9a5ce7b946dfe153ceb2309f2d0f39299550b0cb Mon Sep 17 00:00:00 2001
From: James Walker <walkah@walkah.net>
Date: Sat, 4 Jun 2022 12:53:24 -0400
Subject: [PATCH] =?UTF-8?q?=F0=9F=9A=80=20postgresqlBackups=20(finally)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 hosts/plato/configuration.nix         |  1 +
 modules/gitea/default.nix             | 51 ++++++++++++++-------------
 modules/home-assistant/postgresql.nix |  1 +
 modules/matrix/default.nix            |  1 +
 modules/pleroma/default.nix           |  1 +
 modules/postgresql/default.nix        | 38 ++++++++++++++++++++
 6 files changed, 69 insertions(+), 24 deletions(-)
 create mode 100644 modules/postgresql/default.nix

diff --git a/hosts/plato/configuration.nix b/hosts/plato/configuration.nix
index c67d3e2..00a0255 100644
--- a/hosts/plato/configuration.nix
+++ b/hosts/plato/configuration.nix
@@ -10,6 +10,7 @@
     ../../modules/home-assistant
     ../../modules/matrix
     ../../modules/pleroma
+    ../../modules/postgresql
     ../../modules/sops
   ];
 
diff --git a/modules/gitea/default.nix b/modules/gitea/default.nix
index d4adafb..0c84c74 100644
--- a/modules/gitea/default.nix
+++ b/modules/gitea/default.nix
@@ -12,31 +12,34 @@ in
   };
   users.groups.git = { };
 
-  services.gitea = {
-    enable = true;
-    user = "git";
-    domain = "walkah.dev";
-    appName = "walkah forge";
-    rootUrl = "https://walkah.dev/";
-    httpAddress = "0.0.0.0";
-    httpPort = 8003;
-    log.level = "Error";
-    lfs.enable = true;
-
-    disableRegistration = true;
-    cookieSecure = true;
-
-    settings = {
-      other.SHOW_FOOTER_VERSION = false;
-      repository.DEFAULT_BRANCH = "main";
-      server.SSH_DOMAIN = "git.walkah.dev";
-    };
-
-    dump.enable = false;
-
-    database = {
-      type = "postgres";
+  services = {
+    gitea = {
+      enable = true;
       user = "git";
+      domain = "walkah.dev";
+      appName = "walkah forge";
+      rootUrl = "https://walkah.dev/";
+      httpAddress = "0.0.0.0";
+      httpPort = 8003;
+      log.level = "Error";
+      lfs.enable = true;
+
+      disableRegistration = true;
+      cookieSecure = true;
+
+      settings = {
+        other.SHOW_FOOTER_VERSION = false;
+        repository.DEFAULT_BRANCH = "main";
+        server.SSH_DOMAIN = "git.walkah.dev";
+      };
+
+      dump.enable = false;
+
+      database = {
+        type = "postgres";
+        user = "git";
+      };
     };
+    postgresqlBackup.databases = [ "gitea" ];
   };
 }
diff --git a/modules/home-assistant/postgresql.nix b/modules/home-assistant/postgresql.nix
index 0ca40ff..076a772 100644
--- a/modules/home-assistant/postgresql.nix
+++ b/modules/home-assistant/postgresql.nix
@@ -9,5 +9,6 @@
         ensurePermissions = { "DATABASE hass" = "ALL PRIVILEGES"; };
       }];
     };
+    postgresqlBackup.databases = [ "hass" ];
   };
 }
diff --git a/modules/matrix/default.nix b/modules/matrix/default.nix
index 0f5b268..a52435c 100644
--- a/modules/matrix/default.nix
+++ b/modules/matrix/default.nix
@@ -13,6 +13,7 @@
             LC_CTYPE = "C";
       '';
     };
+    postgresqlBackup.databases = [ "matrix" ];
 
     matrix-synapse = {
       enable = true;
diff --git a/modules/pleroma/default.nix b/modules/pleroma/default.nix
index 20e0c02..c79beac 100644
--- a/modules/pleroma/default.nix
+++ b/modules/pleroma/default.nix
@@ -13,5 +13,6 @@
         ensurePermissions = { "DATABASE pleroma" = "ALL PRIVILEGES"; };
       }];
     };
+    postgresqlBackup.databases = [ "pleroma" ];
   };
 }
diff --git a/modules/postgresql/default.nix b/modules/postgresql/default.nix
new file mode 100644
index 0000000..dcbda28
--- /dev/null
+++ b/modules/postgresql/default.nix
@@ -0,0 +1,38 @@
+{ pkgs, config, ... }: {
+  services = {
+    postgresql = {
+      enable = true;
+    };
+
+    postgresqlBackup = {
+      enable = true;
+    };
+  };
+
+  # Postgres upgrades: https://nixos.org/manual/nixos/stable/index.html#module-services-postgres-upgrading
+  environment.systemPackages = [
+    (pkgs.writeScriptBin "upgrade-pg-cluster" ''
+      set -eux
+      # XXX it's perhaps advisable to stop all services that depend on postgresql
+      systemctl stop postgresql
+
+      # XXX replace `<new version>` with the psqlSchema here
+      export NEWDATA="/var/lib/postgresql/11.1"
+
+      # XXX specify the postgresql package you'd like to upgrade to
+      export NEWBIN="${pkgs.postgresql_12}/bin"
+
+      export OLDDATA="${config.services.postgresql.dataDir}"
+      export OLDBIN="${config.services.postgresql.package}/bin"
+
+      install -d -m 0700 -o postgres -g postgres "$NEWDATA"
+      cd "$NEWDATA"
+      sudo -u postgres $NEWBIN/initdb -D "$NEWDATA"
+
+      sudo -u postgres $NEWBIN/pg_upgrade \
+        --old-datadir "$OLDDATA" --new-datadir "$NEWDATA" \
+        --old-bindir $OLDBIN --new-bindir $NEWBIN \
+        "$@"
+    '')
+  ];
+}