From 1d0eccd39039a27dce452a8169f5b86e5c54da95 Mon Sep 17 00:00:00 2001
From: Felix Buehler <account@buehler.rocks>
Date: Thu, 7 Dec 2023 00:40:36 +0100
Subject: [PATCH] service/nginx: exclude access.log from backup

---
 modules/services/nginx/default.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/modules/services/nginx/default.nix b/modules/services/nginx/default.nix
index 5139d02..b40ff8e 100644
--- a/modules/services/nginx/default.nix
+++ b/modules/services/nginx/default.nix
@@ -419,6 +419,13 @@ in
         inherit (cfg.sso) port;
       }
     ];
+    my.services.backup = {
+      exclude = [
+        # fails often because the file changed
+        "/var/log/nginx/access.log"
+      ];
+    };
+
     networking.firewall.allowedTCPPorts = [ 80 443 ];
     # Nginx needs to be able to read the certificates
     users.users.nginx.extraGroups = [ "acme" ];