challenger/backup: add hostBackups

hosts/challenger/backup.nix

@@ -33,13 +33,22 @@
       "/var/lib/calibre-server"
     ];
 
+    # Other system backups (NB: Large!)
+    hostBackups = localJob "hostBackups" [
+      "/tank/backup"
+    ] // {
+      pruneOpts = [ "--keep-monthly 12" ];
+    };
+
     media = localJob "media" [
-      "/tank/media/music"
       "/tank/media/books"
+      "/tank/media/komga"
+      "/tank/media/music"
     ];
     media-remote = cloudJob "media" [
-      "/tank/media/music"
       "/tank/media/books"
+      "/tank/media/komga"
+      "/tank/media/music"
     ] // {
       pruneOpts = [ "--keep-monthly 12" ];
     };
@@ -48,6 +57,7 @@
     nextcloud = localJob "nextcloud" [ "/tank/nextcloud" ];
     nextcloud-remote = cloudJob "nextcloud" [ "/tank/nextcloud" ];
 
+    # Postgresql databases
     postgres = (localJob "postgres" [ "/var/backup/postgres" ]) // {
       timerConfig.OnCalendar = "05:15"; # 2h after postgresqlBackup
     };
@@ -58,10 +68,11 @@
     # Transmission metadata/config
     transmission = localJob "transmission" [ "/var/lib/transmission" ];
 
-    # TODO: timemachine, komga
+    # TODO: timemachine
   };
 
   sops.secrets."restic/calibre" = { };
+  sops.secrets."restic/hostBackups" = { };
   sops.secrets."restic/media" = { };
   sops.secrets."restic/nextcloud" = { };
   sops.secrets."restic/postgres" = { };