From 4956b7a3036759d84e950063f39b084072da6075 Mon Sep 17 00:00:00 2001
From: Christoph Schmatzler <christoph@schmatzler.com>
Date: Sat, 20 Dec 2025 21:07:02 +0000
Subject: [PATCH] archive

---
 hosts/mindy/default.nix | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/hosts/mindy/default.nix b/hosts/mindy/default.nix
index 1157116..0150588 100644
--- a/hosts/mindy/default.nix
+++ b/hosts/mindy/default.nix
@@ -1,5 +1,6 @@
 {
 	config,
+	lib,
 	modulesPath,
 	hostname,
 	inputs,
@@ -25,9 +26,26 @@
 	sops.secrets.mindy-pgbackrest = {
 		sopsFile = ../../secrets/mindy-pgbackrest;
 		format = "binary";
+		owner = "postgres";
+		group = "postgres";
 	};
 
-	environment.systemPackages = [pkgs.pgbackrest];
+	environment.systemPackages = [
+		pkgs.pgbackrest
+		(pkgs.writeShellScriptBin "pgbackrest-archive-push" ''
+			set -a
+			source /run/secrets/mindy-pgbackrest
+			set +a
+			exec ${pkgs.pgbackrest}/bin/pgbackrest --stanza=main archive-push "$1"
+		'')
+	];
+
+	services.postgresql.settings.archive_command = lib.mkForce "${pkgs.writeShellScript "pgbackrest-archive-push" ''
+		set -a
+		source /run/secrets/mindy-pgbackrest
+		set +a
+		exec ${pkgs.pgbackrest}/bin/pgbackrest --stanza=main archive-push %p
+	''}";
 
 	environment.etc."pgbackrest/pgbackrest.conf".text = ''
 		[global]