pub-solar/infra
6
1
Fork 3
Code Issues 25 Pull requests 10 Actions Packages Projects 1 Releases Wiki Activity

obs-portal: add backups

Browse source 
Restic backups to garage S3 bucket
This commit is contained in:
teutat3s 2024-08-25 03:29:25 +02:00
parent b6be95d032
commit 9068dfa00c
Signed by: teutat3s
GPG key ID: 4FA1D3FA524F22C1
4 changed files with 27 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
modules/obs-portal/default.nix
View file

@ -147,4 +147,29 @@ in
};
};
};
services.restic.backups.obs-portal-garage = {
paths = [
"/var/lib/obs-portal/data"
"/tmp/obs-portal-backup.sql"
];
timerConfig = {
OnCalendar = "*-*-* 00:30:00 Etc/UTC";
};
initialize = true;
passwordFile = config.age.secrets."restic-repo-garage-obs-portal".path;
environmentFile = config.age.secrets."restic-repo-garage-obs-portal-env".path;
repository = "s3:https://buckets.pub.solar/obs-portal-backups";
backupPrepareCommand = ''
${pkgs.docker}/bin/docker exec -ti --user postgres obs-portal-db pg_dump obs > /tmp/obs-portal-backup.sql
'';
backupCleanupCommand = ''
rm /tmp/obs-portal-backup.sql
'';
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 4"
"--keep-monthly 3"
];
};
}

BIN
secrets/restic-repo-garage-obs-portal-env.age Normal file
View file

Binary file not shown.

BIN
secrets/restic-repo-garage-obs-portal.age Normal file
View file

Binary file not shown.

2
secrets/secrets.nix
View file

@ -54,6 +54,8 @@ in
"restic-repo-droppie.age".publicKeys = nachtigallKeys ++ adminKeys;
"restic-repo-storagebox.age".publicKeys = nachtigallKeys ++ adminKeys;
"restic-repo-garage-obs-portal.age".publicKeys = nachtigallKeys ++ adminKeys;
"restic-repo-garage-obs-portal-env.age".publicKeys = nachtigallKeys ++ adminKeys;
"drone-db-secrets.age".publicKeys = flora6Keys ++ adminKeys;
"drone-secrets.age".publicKeys = flora6Keys ++ adminKeys;