Backup wiki research

1 files changed, 56 insertions, 1 deletions

diff --git a/wikiwiki.nix b/wikiwiki.nix
index aa24e01..db53a8a 100644
--- a/wikiwiki.nix
+++ b/wikiwiki.nix
@@ -16,7 +16,7 @@
 # You should have received a copy of the GNU Affero General Public License
 # along with loang configuration.  If not, see <https://www.gnu.org/licenses/>.
 
-{ config, lib, ... }:
+{ config, lib, pkgs, ... }:
 let hostname = "nhanh.${config.networking.domain}";
 in {
   services = {
@@ -33,10 +33,15 @@ in {
         $wgGroupPermissions['*']['read'] = false;
         $wgGroupPermissions['*']['edit'] = false;
         $wgGroupPermissions['*']['createaccount'] = false;
+        $wgLogos = [
+          'svg' => "https://upload.wikimedia.org/wikipedia/commons/e/e1/Wiki_research_logo.svg",
+        ];
+        $wgFileExtensions = array_merge($wgFileExtensions, [ 'pdf' ]);
       '';
       name = "Research on Wikipedia governance";
       nginx.hostName = hostname;
       passwordFile = "/dev/null"; # this is so dumb
+      uploadsDir = "/mnt/nas/www/nhanh.loang.net";
       webserver = "nginx";
     };
 
@@ -60,5 +65,55 @@ in {
         "~ ^/w/(skins|extensions)/.+\\.(css|js|gif|jpg|jpeg|png|svg|wasm|ttf|woff|woff2)$" = rewrite;
       };
     };
+
+    phpfpm.pools.mediawiki.phpOptions = ''
+      post_max_size = 100M
+      upload_max_filesize = 100M
+    '';
+
+    postgresqlBackup.databases = [ "mediawiki" ];
   };
+
+  systemd = let
+    service = user: script: {
+      inherit script;
+      serviceConfig  = {
+        Type = "oneshot";
+        User = user;
+      };
+    };
+    timer = unit: {
+      wantedBy = [ "timers.target" ];
+      timerConfig = {
+        OnBootSec = "1d";
+        OnUnitActiveSec = "1d";
+        Unit = "${unit}.service";
+      };
+    };
+  in {
+    services = {
+      "wiki-db-backup" = service "postgres" ''
+        today=$(${pkgs.coreutils}/bin/date --iso-8601)
+        backup=/mnt/nas/backup/nhanh.loang.net/$today.sql.zstd
+        ${pkgs.coreutils}/bin/install -g mediawiki -m 640\
+          /mnt/nas/backup/postgresql/mediawiki.sql.zstd $backup
+      '';
+      "wiki-uploads-backup" = service "mediawiki" ''
+        backup=/mnt/nas/backup/nhanh.loang.net
+        ${pkgs.rsync}/bin/rsync -a --delete\
+          /mnt/nas/www/nhanh.loang.net/ $backup/latest/
+        today=$(${pkgs.coreutils}/bin/date --iso-8601)
+        ${pkgs.coreutils}/bin/cp -al $backup/{latest,$today}
+      '';
+    };
+    timers = {
+      "wiki-db-backup" = timer "wiki-uploads-backup";
+      "wiki-uploads-backup" = timer "wiki-uploads-backup";
+    };
+  };
+
+  users.groups.mediawiki.members = [
+    "mediawiki" "nginx" "postgres"
+    "ooze" "cnx"
+  ];
 }