alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 4 Actions Activity

Automated Manifest Update (#4650)

Browse Source 
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #4650
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #4650.
This commit is contained in:
gitea-bot
2026-03-11 22:40:47 +00:00
committed by Alex Lebens
parent a61ff80d19
commit 22a4f1c4a5
55 changed files with 1186 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

58
clusters/cl01tl/manifests/home-assistant/ExternalSecret-home-assistant-config-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: home-assistant-config-backup-secret-remote
namespace: home-assistant
labels:
helm.sh/chart: volsync-target-config-0.8.0
app.kubernetes.io/instance: home-assistant
app.kubernetes.io/part-of: home-assistant
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: home-assistant-config-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/home-assistant/home-assistant-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

2
clusters/cl01tl/manifests/home-assistant/ReplicationSource-home-assistant-config-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: home-assistant-config
trigger:
schedule: 24 9 * * *
schedule: 22 10 * * *
restic:
pruneIntervalDays: 7
repository: home-assistant-config-backup-secret-external

2
clusters/cl01tl/manifests/home-assistant/ReplicationSource-home-assistant-config-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: home-assistant-config
trigger:
schedule: 24 8 * * *
schedule: 22 8 * * *
restic:
pruneIntervalDays: 7
repository: home-assistant-config-backup-secret-local

34
clusters/cl01tl/manifests/home-assistant/ReplicationSource-home-assistant-config-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: home-assistant-config-backup-source-remote
namespace: home-assistant
labels:
helm.sh/chart: volsync-target-config-0.8.0
app.kubernetes.io/instance: home-assistant
app.kubernetes.io/part-of: home-assistant
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: home-assistant-config-backup
spec:
sourcePVC: home-assistant-config
trigger:
schedule: 22 9 * * *
restic:
pruneIntervalDays: 7
repository: home-assistant-config-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsUser: 1000
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

2
clusters/cl01tl/manifests/immich/ReplicationSource-immich-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: immich
trigger:
schedule: 28 9 * * *
schedule: 24 10 * * *
restic:
pruneIntervalDays: 7
repository: immich-backup-secret-external

2
clusters/cl01tl/manifests/immich/ReplicationSource-immich-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: immich
trigger:
schedule: 28 8 * * *
schedule: 24 8 * * *
restic:
pruneIntervalDays: 7
repository: immich-backup-secret-local

2
clusters/cl01tl/manifests/immich/ReplicationSource-immich-backup-source-remote.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: immich
trigger:
schedule: 28 10 * * *
schedule: 24 9 * * *
restic:
pruneIntervalDays: 7
repository: immich-backup-secret-remote

58
clusters/cl01tl/manifests/jellyfin/ExternalSecret-jellyfin-config-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: jellyfin-config-backup-secret-remote
namespace: jellyfin
labels:
helm.sh/chart: volsync-target-config-0.8.0
app.kubernetes.io/instance: jellyfin
app.kubernetes.io/part-of: jellyfin
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: jellyfin-config-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellyfin/jellyfin-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

2
clusters/cl01tl/manifests/jellyfin/ReplicationSource-jellyfin-config-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: jellyfin-config
trigger:
schedule: 30 9 * * *
schedule: 26 10 * * *
restic:
pruneIntervalDays: 7
repository: jellyfin-config-backup-secret-external

2
clusters/cl01tl/manifests/jellyfin/ReplicationSource-jellyfin-config-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: jellyfin-config
trigger:
schedule: 30 8 * * *
schedule: 26 8 * * *
restic:
pruneIntervalDays: 7
repository: jellyfin-config-backup-secret-local

29
clusters/cl01tl/manifests/jellyfin/ReplicationSource-jellyfin-config-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: jellyfin-config-backup-source-remote
namespace: jellyfin
labels:
helm.sh/chart: volsync-target-config-0.8.0
app.kubernetes.io/instance: jellyfin
app.kubernetes.io/part-of: jellyfin
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: jellyfin-config-backup
spec:
sourcePVC: jellyfin-config
trigger:
schedule: 26 9 * * *
restic:
pruneIntervalDays: 7
repository: jellyfin-config-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 10Gi

58
clusters/cl01tl/manifests/jellystat/ExternalSecret-jellystat-data-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: jellystat-data-backup-secret-remote
namespace: jellystat
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: jellystat
app.kubernetes.io/part-of: jellystat
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: jellystat-data-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellystat/jellystat-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

2
clusters/cl01tl/manifests/jellystat/ReplicationSource-jellystat-data-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: jellystat-data
trigger:
schedule: 32 9 * * *
schedule: 28 10 * * *
restic:
pruneIntervalDays: 7
repository: jellystat-data-backup-secret-external

2
clusters/cl01tl/manifests/jellystat/ReplicationSource-jellystat-data-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: jellystat-data
trigger:
schedule: 32 8 * * *
schedule: 28 8 * * *
restic:
pruneIntervalDays: 7
repository: jellystat-data-backup-secret-local

29
clusters/cl01tl/manifests/jellystat/ReplicationSource-jellystat-data-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: jellystat-data-backup-source-remote
namespace: jellystat
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: jellystat
app.kubernetes.io/part-of: jellystat
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: jellystat-data-backup
spec:
sourcePVC: jellystat-data
trigger:
schedule: 28 9 * * *
restic:
pruneIntervalDays: 7
repository: jellystat-data-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: karakeep-backup-secret-remote
namespace: karakeep
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: karakeep
app.kubernetes.io/part-of: karakeep
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: karakeep-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/karakeep/karakeep"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

2
clusters/cl01tl/manifests/karakeep/ReplicationSource-karakeep-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: karakeep
trigger:
schedule: 34 9 * * *
schedule: 30 10 * * *
restic:
pruneIntervalDays: 7
repository: karakeep-backup-secret-external

2
clusters/cl01tl/manifests/karakeep/ReplicationSource-karakeep-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: karakeep
trigger:
schedule: 34 8 * * *
schedule: 30 8 * * *
restic:
pruneIntervalDays: 7
repository: karakeep-backup-secret-local

29
clusters/cl01tl/manifests/karakeep/ReplicationSource-karakeep-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: karakeep-backup-source-remote
namespace: karakeep
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: karakeep
app.kubernetes.io/part-of: karakeep
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: karakeep-backup
spec:
sourcePVC: karakeep
trigger:
schedule: 30 9 * * *
restic:
pruneIntervalDays: 7
repository: karakeep-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: libation-backup-secret-remote
namespace: libation
labels:
helm.sh/chart: volsync-target-config-0.8.0
app.kubernetes.io/instance: libation
app.kubernetes.io/part-of: libation
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: libation-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/libation/libation"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

2
clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: libation
trigger:
schedule: 36 9 * * *
schedule: 32 10 * * *
restic:
pruneIntervalDays: 7
repository: libation-backup-secret-external

2
clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: libation
trigger:
schedule: 36 8 * * *
schedule: 32 8 * * *
restic:
pruneIntervalDays: 7
repository: libation-backup-secret-local

29
clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: libation-backup-source-remote
namespace: libation
labels:
helm.sh/chart: volsync-target-config-0.8.0
app.kubernetes.io/instance: libation
app.kubernetes.io/part-of: libation
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: libation-backup
spec:
sourcePVC: libation
trigger:
schedule: 32 9 * * *
restic:
pruneIntervalDays: 7
repository: libation-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: lidarr-config-backup-secret-remote
namespace: lidarr
labels:
helm.sh/chart: volsync-target-config-0.8.0
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: lidarr-config-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidarr/lidarr-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

2
clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: lidarr-config
trigger:
schedule: 38 9 * * *
schedule: 34 10 * * *
restic:
pruneIntervalDays: 7
repository: lidarr-config-backup-secret-external

2
clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: lidarr-config
trigger:
schedule: 38 8 * * *
schedule: 34 8 * * *
restic:
pruneIntervalDays: 7
repository: lidarr-config-backup-secret-local

34
clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: lidarr-config-backup-source-remote
namespace: lidarr
labels:
helm.sh/chart: volsync-target-config-0.8.0
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: lidarr-config-backup
spec:
sourcePVC: lidarr-config
trigger:
schedule: 34 9 * * *
restic:
pruneIntervalDays: 7
repository: lidarr-config-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsUser: 1000
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: matrix-hookshot-backup-secret-remote
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-hookshot-0.8.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: matrix-hookshot-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/matrix-hookshot"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: matrix-synapse-backup-secret-remote
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-synapse-0.8.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: matrix-synapse-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/matrix-synapse"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: mautrix-discord-backup-secret-remote
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-discord-0.8.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: mautrix-discord-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-discord"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: mautrix-whatsapp-backup-secret-remote
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-whatsapp-0.8.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: mautrix-whatsapp-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-whatsapp"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

2
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: matrix-hookshot
trigger:
schedule: 46 9 * * *
schedule: 38 10 * * *
restic:
pruneIntervalDays: 7
repository: matrix-hookshot-backup-secret-external

2
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: matrix-hookshot
trigger:
schedule: 46 8 * * *
schedule: 38 8 * * *
restic:
pruneIntervalDays: 7
repository: matrix-hookshot-backup-secret-local

29
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: matrix-hookshot-backup-source-remote
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-hookshot-0.8.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: matrix-hookshot-backup
spec:
sourcePVC: matrix-hookshot
trigger:
schedule: 38 9 * * *
restic:
pruneIntervalDays: 7
repository: matrix-hookshot-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

2
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: matrix-synapse
trigger:
schedule: 44 9 * * *
schedule: 36 10 * * *
restic:
pruneIntervalDays: 7
repository: matrix-synapse-backup-secret-external

2
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: matrix-synapse
trigger:
schedule: 44 8 * * *
schedule: 36 8 * * *
restic:
pruneIntervalDays: 7
repository: matrix-synapse-backup-secret-local

29
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: matrix-synapse-backup-source-remote
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-synapse-0.8.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: matrix-synapse-backup
spec:
sourcePVC: matrix-synapse
trigger:
schedule: 36 9 * * *
restic:
pruneIntervalDays: 7
repository: matrix-synapse-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

2
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: mautrix-discord
trigger:
schedule: 48 9 * * *
schedule: 40 10 * * *
restic:
pruneIntervalDays: 7
repository: mautrix-discord-backup-secret-external

2
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: mautrix-discord
trigger:
schedule: 48 8 * * *
schedule: 40 8 * * *
restic:
pruneIntervalDays: 7
repository: mautrix-discord-backup-secret-local

32
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,32 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: mautrix-discord-backup-source-remote
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-discord-0.8.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: mautrix-discord-backup
spec:
sourcePVC: mautrix-discord
trigger:
schedule: 40 9 * * *
restic:
pruneIntervalDays: 7
repository: mautrix-discord-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
runAsGroup: 1337
runAsUser: 1337
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

2
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: mautrix-whatsapp
trigger:
schedule: 50 9 * * *
schedule: 42 10 * * *
restic:
pruneIntervalDays: 7
repository: mautrix-whatsapp-backup-secret-external

2
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: mautrix-whatsapp
trigger:
schedule: 50 8 * * *
schedule: 42 8 * * *
restic:
pruneIntervalDays: 7
repository: mautrix-whatsapp-backup-secret-local

32
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,32 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: mautrix-whatsapp-backup-source-remote
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-whatsapp-0.8.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: mautrix-whatsapp-backup
spec:
sourcePVC: mautrix-whatsapp
trigger:
schedule: 42 9 * * *
restic:
pruneIntervalDays: 7
repository: mautrix-whatsapp-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
runAsGroup: 1337
runAsUser: 1337
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/navidrome/ExternalSecret-navidrome-data-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: navidrome-data-backup-secret-remote
namespace: navidrome
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: navidrome
app.kubernetes.io/part-of: navidrome
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: navidrome-data-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/navidrome/navidrome-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

2
clusters/cl01tl/manifests/navidrome/ReplicationSource-navidrome-data-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: navidrome-data
trigger:
schedule: 52 9 * * *
schedule: 46 10 * * *
restic:
pruneIntervalDays: 7
repository: navidrome-data-backup-secret-external

2
clusters/cl01tl/manifests/navidrome/ReplicationSource-navidrome-data-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: navidrome-data
trigger:
schedule: 52 8 * * *
schedule: 46 8 * * *
restic:
pruneIntervalDays: 7
repository: navidrome-data-backup-secret-local

34
clusters/cl01tl/manifests/navidrome/ReplicationSource-navidrome-data-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: navidrome-data-backup-source-remote
namespace: navidrome
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: navidrome
app.kubernetes.io/part-of: navidrome
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: navidrome-data-backup
spec:
sourcePVC: navidrome-data
trigger:
schedule: 46 9 * * *
restic:
pruneIntervalDays: 7
repository: navidrome-data-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsUser: 1000
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/ollama/ExternalSecret-ollama-web-data-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: ollama-web-data-backup-secret-remote
namespace: ollama
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: ollama
app.kubernetes.io/part-of: ollama
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ollama-web-data-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ollama/ollama-web-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

2
clusters/cl01tl/manifests/ollama/ReplicationSource-ollama-web-data-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: ollama-web-data
trigger:
schedule: 54 9 * * *
schedule: 48 10 * * *
restic:
pruneIntervalDays: 7
repository: ollama-web-data-backup-secret-external

2
clusters/cl01tl/manifests/ollama/ReplicationSource-ollama-web-data-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: ollama-web-data
trigger:
schedule: 54 8 * * *
schedule: 48 8 * * *
restic:
pruneIntervalDays: 7
repository: ollama-web-data-backup-secret-local

32
clusters/cl01tl/manifests/ollama/ReplicationSource-ollama-web-data-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,32 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: ollama-web-data-backup-source-remote
namespace: ollama
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: ollama
app.kubernetes.io/part-of: ollama
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ollama-web-data-backup
spec:
sourcePVC: ollama-web-data
trigger:
schedule: 48 9 * * *
restic:
pruneIntervalDays: 7
repository: ollama-web-data-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
runAsGroup: 1337
runAsUser: 1337
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/outline/ExternalSecret-outline-data-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: outline-data-backup-secret-remote
namespace: outline
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: outline
app.kubernetes.io/part-of: outline
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: outline-data-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/outline/outline-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

2
clusters/cl01tl/manifests/outline/ReplicationSource-outline-data-backup-source-external.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: outline-data
trigger:
schedule: 50 12 * * *
schedule: 50 10 * * *
restic:
pruneIntervalDays: 7
repository: outline-data-backup-secret-external

2
clusters/cl01tl/manifests/outline/ReplicationSource-outline-data-backup-source-local.yaml
View File

@@ -13,7 +13,7 @@ metadata:
spec:
sourcePVC: outline-data
trigger:
schedule: 50 11 * * *
schedule: 50 8 * * *
restic:
pruneIntervalDays: 7
repository: outline-data-backup-secret-local

31
clusters/cl01tl/manifests/outline/ReplicationSource-outline-data-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,31 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: outline-data-backup-source-remote
namespace: outline
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: outline
app.kubernetes.io/part-of: outline
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: outline-data-backup
spec:
sourcePVC: outline-data
trigger:
schedule: 50 9 * * *
restic:
pruneIntervalDays: 7
repository: outline-data-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 1001
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi