challenger: Fix nfs-client, replace borg with restic

hosts/challenger/backup.nix

@@ -1,38 +1,32 @@
 { config, pkgs, lib, ... }:
 {
-  services.borgbackup.jobs =
-    let
-      borgJob = name: {
-        environment.BORG_RSH = "ssh -i /root/.ssh/fealsyn1";
-        environment.BORG_REMOTE_PATH = "/usr/local/bin/borg";
-        repo = "ssh://backup@feal-syn1.home.feal.no/volume2/backup/borg/voyager/${name}";
-        compression = "auto,zstd";
-      };
-    in {
-      postgresDaily = borgJob "postgres::daily" // {
-        paths = "/var/backup/postgres";
-        startAt = "*-*-* 05:15:00"; # 2 hours after postgresqlBackup
-        extraInitArgs = "--storage-quota 10G";
-        encryption = {
-          mode = "repokey-blake2";
-          passCommand = "cat ${config.sops.secrets."borg/postgres".path}";
-        };
-      };
-
-      postgresWeekly = borgJob "postgres::weekly" // {
-        paths = "/var/backup/postgres";
-        startAt = "Mon *-*-* 05:15:00"; # 2 hours after postgresqlBackup
-        extraInitArgs = "--storage-quota 10G";
-        encryption = {
-          mode = "repokey-blake2";
-          passCommand = "cat ${config.sops.secrets."borg/postgres".path}";
-        };
-      };
-
-      # TODO: timemachine, nextcloud, komga, calibre
-
+  services.restic.backups = let
+    localJob = name: paths: {
+      inherit paths;
+      repository = "/mnt/feal-syn1/backup/challenger/${name}";
+      passwordFile = config.sops.secrets."restic/${name}".path;
+      initialize = true;
+      pruneOpts = [
+        "--keep-daily 7"
+        "--keep-weekly 4"
+        "--keep-monthly 3"
+        "--keep-yearly 10"
+      ];
+    };
+  in {
+    postgres = (localJob "postgres" [ "/var/backup/postgres" ]) // {
+      timerConfig.OnCalendar = "05:15"; # 2h after postgresqlBackup
     };
 
-  sops.secrets."borg/postgres" = { };
-  sops.secrets."borg/transmission" = { };
+    transmission = localJob "transmission" [ "/var/lib/transmission" ];
+
+    # TODO: timemachine, nextcloud, komga, calibre
+  };
+
+  sops.secrets."restic/postgres" = { };
+  sops.secrets."restic/transmission" = { };
+
+  environment.systemPackages = with pkgs; [
+    restic
+  ];
 }

hosts/challenger/filesystems.nix

@@ -22,6 +22,12 @@
     "/mnt/feal-syn1/backup" = {
       device = "feal-syn1.home.feal.no:/volume2/backup";
       fsType = "nfs";
+      options = [
+        "defaults"
+        "noatime"
+        "rw"
+        "nfsvers=3"
+      ];
     };
   };
 }