2023-12-07 10:16:46 +01:00
{ pkgs , . . . }: {
2023-12-07 10:20:18 +01:00
services . cron = {
enable = true ;
systemCronJobs = [
2023-12-10 08:00:25 +01:00
" * * * * * r o o t d a t e > > / r o o t / c r o n . t e s t "
2023-12-08 11:18:06 +01:00
# Backups to nuc-docker01
2023-12-10 07:54:22 +01:00
'' 0 0 * * * r o o t ${ pkgs . rsync } / b i n / r s y n c - - d e l e t e - a v r / S t o r a g e / D a t a / D o c k e r / r o o t @ n u c - d o c k e r 0 1 : / S t o r a g e / D a t a / D o c k e r / ''
'' 0 3 * * * r o o t ${ pkgs . rsync } / b i n / r s y n c - a v r / S t o r a g e / D a t a / D o c k e r / n e x t c l o u d / h t m l / d a t a / a l b e r t / f i l e s / I n s t a n t U p l o a d / r o o t @ n u c - d o c k e r 0 1 : / S t o r a g e / V i d e o / P i c t u r e s / I n s t a n t U p l o a d / ''
'' 0 5 * * * r o o t ${ pkgs . rsync } / b i n / r s y n c - a v r / S t o r a g e / D a t a / D o c k e r / n e x t c l o u d / h t m l / d a t a / a l b e r t / f i l e s / W a l l p a p e r s / r o o t @ n u c - d o c k e r 0 1 : / S t o r a g e / V i d e o / P i c t u r e s / W a l l p a p e r s ''
2023-12-08 11:18:06 +01:00
# DERP relay certs
2023-12-10 07:54:22 +01:00
'' @ h o u r l y r o o t c p / S t o r a g e / D a t a / D o c k e r / l e t s e n c r y p t / c e r t s / c e r t s / \ * . s y s c t l . i o . c r t / S t o r a g e / D a t a / D o c k e r / l e t s e n c r y p t / c e r t s / c e r t s / d e r p . s y s c t l . i o . c r t ''
'' @ h o u r l y r o o t c p / S t o r a g e / D a t a / D o c k e r / l e t s e n c r y p t / c e r t s / p r i v a t e / \ * . s y s c t l . i o . k e y / S t o r a g e / D a t a / D o c k e r / l e t s e n c r y p t / c e r t s / p r i v a t e / d e r p . s y s c t l . i o . k e y ''
2023-12-08 11:18:06 +01:00
# Back up the docker containers weekly:
2023-12-10 07:54:22 +01:00
'' @ w e e k l y r o o t s s h n u c - d o c k e r 0 1 " r m - r f / S t o r a g e / B a c k u p s / D o c k e r / s y s c t l . i o / * " ; f o r i i n $( d o c k e r p s - - f o r m a t ' { { . N a m e s } } ' ) ; d o d o c k e r e x p o r t $i | g z i p - c f | s s h r o o t @ n u c - d o c k e r 0 1 " c a t > / S t o r a g e / B a c k u p s / D o c k e r / s y s c t l . i o / $i . t a r . g z " ; d o n e ''
2023-12-08 11:18:06 +01:00
# Set a random Pi-Hole password
2023-12-10 08:04:28 +01:00
'' * * * * * r o o t d o c k e r e x e c p i h o l e s u d o p i h o l e - a - p $( o p e n s s l r a n d - h e x 1 2 8 ) ''
2023-12-08 11:18:06 +01:00
# Run the ClamAV scan
2023-12-10 07:54:22 +01:00
'' @ m o n t h l y r o o t / S t o r a g e / D a t a / d o c k e r - c o m p o s e / s y s c t l . i o / s c r i p t s / c l a m s c a n - c r o n . s h ''
2023-12-08 11:19:29 +01:00
# Back up Loki logs monthly
2023-12-10 07:54:22 +01:00
'' @ m o n t h l y r o o t / S t o r a g e / D a t a / d o c k e r - c o m p o s e / s y s c t l . i o / s c r i p t s / b a c k u p - l o g s . s h > > / S t o r a g e / D a t a / T e m p o r a r y / l o g _ b a c k u p s . l o g ''
2023-12-07 10:20:18 +01:00
] ;
} ;
2023-12-08 11:18:06 +01:00
# Old crontab:
# # At reboot, apply the ip_tables modprobe so Wireguard works
# @reboot /usr/sbin/modprobe ip_tables
#
# # At reboot, restart Docker. Otherwise, iptables / the firewall freaks out
# @reboot /usr/bin/systemctl stop docker; /usr/bin/systemctl start docker
#
# # Every day, get storage space for monitoring
# @daily source ~/.bashrc; for i in `ls /Storage/Data/Docker`; do echo echo "$(date): $(du -s /Storage/Data/Docker/$i)" | sed -e 's/\/Storage\/Data\/Docker\/\$i//' >> /root/sizes/$i.log; done
#
# # Clean up NextCloud files weekly to save space
# @weekly source ~/.bashrc; /usr/bin/docker exec -uwww-data nextcloud php occ versions:cleanup
# # Run the Nextcloud cronjobs hourly
# @hourly source ~/.bashrc; /usr/bin/docker exec -uwww-data nextcloud php -f /var/www/html/cron.php
#
#
# # Clear out Mastodon caches daily
# @daily source ~/.bashrc; /usr/bin/docker exec mastodon-web tootctl preview_cards remove --days 1
# @daily source ~/.bashrc; /usr/bin/docker exec mastodon-web tootctl media remove --days 1 --prune-profiles
# @daily source ~/.bashrc; /usr/bin/docker exec mastodon-web tootctl accounts prune
# @daily source ~/.bashrc; /usr/bin/docker exec mastodon-web tootctl statuses remove --days 1
# @daily source ~/.bashrc; /usr/bin/docker exec mastodon-web tootctl media remove --remove-headers --include-follows --days 0
# @daily source ~/.bashrc; /usr/bin/docker exec mastodon-web tootctl preview_cards remove --days 1
# @daily source ~/.bashrc; /usr/bin/docker exec mastodon-web tootctl media remove-orphans
#
# # Run the Pixelfed scheduler
# * * * * * /usr/bin/docker exec pixelfed-app php artisan schedule:run
#
# # Run the ClamAV scan
# @monthly source ~/.bashrc; /Storage/Data/docker-compose/sysctl.io/scripts/clamscan-cron.sh
#
# # Set a random PiHole password every minute
# * * * * * /usr/bin/docker exec pihole sudo pihole -a -p $(openssl rand -hex 128)
#
# # back up crontab:
# # 0 0 * * * /usr/bin/crontab -l > /Storage/Data/Temporary/crontab
#
# # Back up and delete local copies of Loki logs monthly
# @monthly source ~/.bashrc; /Storage/Data/docker-compose/sysctl.io/scripts/backup-logs.sh >> /Storage/Data/Temporary/log_backups.log
#
# # Back up the docker containers weekly:
# @weekly source ~/.bashrc; ssh nuc-docker01 "rm -rf /Storage/Backups/Docker/sysctl.io/*"; for i in $(docker ps --format '{{.Names}}'); do docker export $i | gzip -cf | ssh root@nuc-docker01 "cat > /Storage/Backups/Docker/sysctl.io/$i.tar.gz"; done
#
# # Set up DERP relay certs for headscale-derp:
# @hourly cp /Storage/Data/Docker/letsencrypt/certs/certs/\*.sysctl.io.crt /Storage/Data/Docker/letsencrypt/certs/certs/derp.sysctl.io.crt
# @hourly cp /Storage/Data/Docker/letsencrypt/certs/private/\*.sysctl.io.key /Storage/Data/Docker/letsencrypt/certs/private/derp.sysctl.io.key
2023-12-06 03:56:24 +01:00
}
