alyssum/snapper: init

hosts/alyssum/default.nix

@@ -37,6 +37,7 @@
     ./networking.nix
     ./restic.nix
     ./samba.nix
+    ./snapper.nix
 
     ../../users/hana
   ];

hosts/alyssum/restic.nix

@@ -13,14 +13,14 @@
     repositoryFile = config.age.secrets.restic_url.path;
 
     paths = ["/flower"];
+    exclude = ["/.snapshots"];
     timerConfig = {
-      # every 30mns
-      OnCalendar = "*-*-* *:00,30:00";
+      # every 6 hours
+      OnCalendar = "*-*-* 00,06,12,18:00:00";
       Persistent = true;
     };
     pruneOpts = [
-      "--keep-last 24"
-      "--keep-hourly 24"
+      "--keep-last 8"
       "--keep-daily 7"
       "--keep-weekly 5"
       "--keep-monthly 12"

hosts/alyssum/snapper.nix

@@ -0,0 +1,19 @@
+{ ... }: {
+  services.snapper = {
+    cleanupInterval = "1h";
+    persistentTimer = true;
+    snapshotInterval = "*-*-* *:00,30:00";
+    configs.home = {
+      FSTYPE = "btrfs";
+      SUBVOLUME = "/flower";
+      TIMELINE_CLEANUP = true;
+      TIMELINE_CREATE = true;
+      TIMELINE_MIN_AGE = "86400";
+      TIMELINE_LIMIT_HOURLY = "24";
+      TIMELINE_LIMIT_DAILY = "7";
+      TIMELINE_LIMIT_WEEKLY = "5";
+      TIMELINE_LIMIT_MONTHLY = "3";
+      TIMELINE_LIMIT_YEARLY = "0";
+    };
+  };
+}

modules/system/tailscale.nix

@@ -10,4 +10,7 @@
     openFirewall = true;
     useRoutingFeatures = if config.me.environment == "headless" then "both" else "client";
   };
+  systemd.services.tailscaled.serviceConfig.LogFilterPatterns = [
+    "~magicsock.*does not know about peer.*removing route"
+  ];
 }