mediawiki: add backups
All checks were successful
Flake checks / Check (pull_request) Successful in 4m52s

Restic backups to garage S3 bucket
https://garagehq.deuxfleurs.fr/documentation/connect/backup/#restic
This commit is contained in:
teutat3s 2024-08-25 02:33:55 +02:00
parent b6be95d032
commit 37fe5d4263
Signed by: teutat3s
GPG key ID: 4FA1D3FA524F22C1
5 changed files with 125 additions and 0 deletions

View file

@ -10,4 +10,14 @@
mode = "400";
owner = "root";
};
age.secrets.restic-repo-garage-mediawiki = {
file = "${flake.self}/secrets/restic-repo-garage-mediawiki.age";
mode = "400";
owner = "root";
};
age.secrets.restic-repo-garage-mediawiki-env = {
file = "${flake.self}/secrets/restic-repo-garage-mediawiki-env.age";
mode = "400";
owner = "root";
};
}

View file

@ -232,4 +232,30 @@ in
};
};
};
services.restic.backups.mediawiki-garage = {
paths = [
"/var/lib/mediawiki/images"
"/var/lib/mediawiki/uploads"
"/tmp/mediawiki-backup.sql"
];
timerConfig = {
OnCalendar = "*-*-* 00:30:00 Etc/UTC";
};
initialize = true;
passwordFile = config.age.secrets."restic-repo-garage-mediawiki".path;
environmentFile = config.age.secrets."restic-repo-garage-mediawiki-env".path;
repository = "s3:https://buckets.pub.solar/mediawiki-backups";
backupPrepareCommand = ''
${pkgs.sudo}/bin/sudo -u postgres ${pkgs.postgresql}/bin/pg_dump -d mediawiki > /tmp/mediawiki-backup.sql
'';
backupCleanupCommand = ''
rm /tmp/mediawiki-backup.sql
'';
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 4"
"--keep-monthly 3"
];
};
}

View file

@ -0,0 +1,44 @@
age-encryption.org/v1
-> ssh-ed25519 iDKjwg mrV+hjzpF3Gqk6InUYmhwR7mrFHIcOI5PZLTgLnHtGQ
6uYiGWNPewz8LKRns4Ykh5JJROSoCksxwvZLwtyGSoE
-> ssh-ed25519 uYcDNw u659THLfszj4qa80Z+MfEyf3ObrMoJXD/jIcbZh6SFA
uOm0RUX+1RG9+eLadJmhY7BwwLwG47USVuaB2p4B8Xk
-> ssh-rsa f5THog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-> ssh-rsa kFDS0A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-> piv-p256 vRzPNw AjFzsneyImnlMT9U0nX31rODKWaFq7VYXhpTMVjVhnj2
lnVRkWquK4RPYgK9ZfvDtF+jUsr1I2gyyt3/pnJYJ4I
-> piv-p256 zqq/iw A8Oi3vaSDWG0pywERBUvEYG5qyBq1UH/dOhkc0qVX9AI
af/MkfdLhtkYI9+2IVbGSSQ0WDxfesEXxV1Js7e5FkY
-> ssh-ed25519 YFSOsg lwI3MhcOKH5PXvqqaSRCdOr+brSMActxcYou6i9be2Q
dsfNt+pLcdTYSoKe4yayejWgny8tei8jmYRKCc+QS84
-> ssh-ed25519 iHV63A KufdIs6lDf56eIRysnP8KDggGsb3vuHwP0rMW/u79hY
pGZ68vzEAQtioseP4zJ0CADesCyosF3BYMVsz1tJlgk
-> ssh-ed25519 BVsyTA yLZGBdalJE4HtW5VUWWilptIV29rS2AEPQniTVIpRDU
qe25JoMDlIwAt8nP4AlTA0uyEH3dydr+ompAzpCBFn4
-> ssh-ed25519 +3V2lQ G+4GB+IGDqhqWT/VQZ3545oX/0Px1A7R/tN3aLfpHy8
XLS0WgXviONcyaLFc3GVCdRMN4Z4cTgk6lFLOk3dmbg
--- SgCT9VjfKeV5B1szYDpqrXy/vhDT/HqPI03f8HF6Nl4
.îÞ€ø º(Ì4¡ÔVÔßÓÙ¤Í ¬ä™j{<gm?pñ5T#ßý˜<C3BD>Ê„$ûpÿ™Û°óR˜=éàˆ‰qoÒ$ìLðýH.¾êvÆfŠË³;س6-óÍ9óõÀf(0¶n%ÿ®äèœ?ÙÅòòskd ƒ:zv×t
¬&]Çý‰X<E280B0>Õ¡éApd /0±B$U3âK¬Tñ*

View file

@ -0,0 +1,43 @@
age-encryption.org/v1
-> ssh-ed25519 iDKjwg yk6WgkJbk16Yqc/aWojwDePfNZN3XgaiacpZqufw1hc
qx3x0zCUB6l7qPS9R9xGO41s6ESGsNd/ixglY4gYDtY
-> ssh-ed25519 uYcDNw nDZXlykiDEZIA+Srg6imZFRLAzhykR3PDVrfWb693Sg
MBJrrXbtLzBozetgfZaE52o1ixsrPK6Ojdp8sXhI3dc
-> ssh-rsa f5THog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-> ssh-rsa kFDS0A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-> piv-p256 vRzPNw Al8mhhyZ/0YFf7OSKeGm3LZhowpCdcITOhtjmky7Ygnq
CxFNUst8+6e6Cra/j7Pa2lZs3lHGLCOWRInb1VZTr2M
-> piv-p256 zqq/iw A+r/W9OhuPjuGXRuhp1vW45k/QzCFO6VLfp1W6l7RJVU
GxunFSBPJnzd5t5Ar42vr06tyJkJvZhljlGkHVZOFOQ
-> ssh-ed25519 YFSOsg e7udSQwtwKETHB0Re59fb1DdiBBPLDbV/JHmUUI4GSU
054wi1iKJm8lnWDjONCk+h2vea0setKqdCpXHuJaecI
-> ssh-ed25519 iHV63A S2sle86zYVPjtCozODRjqtTs6a5GksTpJHkmO/WYzHU
7h5kS8Hc3BiyhiWerEa9xPX6o+D/bxoJLK1fXFq1jWc
-> ssh-ed25519 BVsyTA 7meQJdKDB4JLKsYmBPgDBUnWhil1fKnoijm+uzHDemY
1bxklkYv5KYab9fXjMtz/w5QTUYMlZFTQG/khBftlWo
-> ssh-ed25519 +3V2lQ n1bF6+o/16zx7dEt/Um1gL30mARiuPaE6z3N+qjFZx4
7ZjmhkuJDYXLcMoUEA0wosWcWZ1T1oR45kVhFyQwN1E
--- TbpcaLv/1jF23nynpaw1XjSKsO2t9hAxovPQHKhXAoQ
P‰^¢f«E~¢÷ß6ÿO[Ö-cf]øÄ9eÓ6Ñû4Eÿl2=sÿßW‡…O¿QFCzcõbÖTšÎÉÿ;[a

View file

@ -54,6 +54,8 @@ in
"restic-repo-droppie.age".publicKeys = nachtigallKeys ++ adminKeys;
"restic-repo-storagebox.age".publicKeys = nachtigallKeys ++ adminKeys;
"restic-repo-garage-mediawiki.age".publicKeys = nachtigallKeys ++ adminKeys;
"restic-repo-garage-mediawiki-env.age".publicKeys = nachtigallKeys ++ adminKeys;
"drone-db-secrets.age".publicKeys = flora6Keys ++ adminKeys;
"drone-secrets.age".publicKeys = flora6Keys ++ adminKeys;