move to standby

This commit is contained in:
2025-02-19 19:07:24 -06:00
parent 403947c864
commit 3b53af67ae
13 changed files with 453 additions and 266 deletions

View File

@@ -0,0 +1,27 @@
apiVersion: v2
name: element-web
version: 1.0.0
description: Element Web
keywords:
- element-web
- chat
- matrix
home: https://wiki.alexlebens.dev/doc/element-web-R4dzXXspgr
sources:
- https://github.com/element-hq/element-web
- https://github.com/cloudflare/cloudflared
- https://hub.docker.com/r/vectorim/element-web
- https://gitlab.com/ananace/charts/-/tree/master/charts/element-web
- https://github.com/alexlebens/helm-charts/tree/main/charts/cloudflared
maintainers:
- name: alexlebens
dependencies:
- name: element-web
version: 1.4.2
repository: https://ananace.gitlab.io/charts
- name: cloudflared
alias: cloudflared
repository: http://alexlebens.github.io/helm-charts
version: 1.13.0
icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/element.png
appVersion: v1.11.88

View File

@@ -0,0 +1,23 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: element-web-cloudflared-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: element-web-cloudflared-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: web
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: cf-tunnel-token
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cloudflare/tunnels/element
metadataPolicy: None
property: token

View File

@@ -0,0 +1,28 @@
element-web:
replicaCount: 1
image:
repository: vectorim/element-web
tag: v1.11.92
pullPolicy: IfNotPresent
defaultServer:
url: https://matrix.alexlebens.dev
name: alexlebens.dev
identity_url: https://alexlebens.dev
config:
disable_3pid_login: true
brand: "Alex Lebens"
branding:
welcome_background_url: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background-2.jpg
auth_header_logo_url: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/icon_white.png
sso_redirect_options:
immediate: true
default_theme: dark
default_country_code: US
ingress:
enabled: false
resources:
requests:
cpu: 10m
memory: 128Mi
cloudflared:
existingSecretName: element-web-cloudflared-secret

View File

@@ -0,0 +1,69 @@
apiVersion: v2
name: matrix-synapse
version: 1.0.0
description: Matrix Synapse
keywords:
- matrix-synapse
- matrix
- chat
- bridge
- matrix-hookshot
- mautrix-discord
- mautrix-whatsapp
home: https://wiki.alexlebens.dev/doc/matrix-gm0OkID2iy
sources:
- https://github.com/element-hq/synapse
- https://github.com/matrix-org/matrix-hookshot
- https://github.com/mautrix/discord
- https://github.com/mautrix/whatsapp
- https://github.com/valkey-io/valkey
- https://github.com/cloudflare/cloudflared
- https://github.com/cloudnative-pg/cloudnative-pg
- https://hub.docker.com/r/halfshot/matrix-hookshot
- https://mau.dev/mautrix/discord/container_registry
- https://mau.dev/mautrix/whatsapp/container_registry
- https://gitlab.com/ananace/charts/-/tree/master/charts/matrix-synapse
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
- https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template
- https://github.com/alexlebens/helm-charts/tree/main/charts/cloudflared
- https://github.com/alexlebens/helm-charts/charts/postgres-cluster
maintainers:
- name: alexlebens
dependencies:
- name: matrix-synapse
version: 3.11.3
repository: https://ananace.gitlab.io/charts
- name: app-template
alias: matrix-hookshot
version: 3.6.1
repository: https://bjw-s.github.io/helm-charts/
- name: app-template
alias: mautrix-discord
repository: https://bjw-s.github.io/helm-charts/
version: 3.6.1
- name: app-template
alias: mautrix-whatsapp
repository: https://bjw-s.github.io/helm-charts/
version: 3.6.1
- name: valkey
alias: valkey-synapse
version: 2.2.3
repository: https://charts.bitnami.com/bitnami
- name: valkey
alias: valkey-hookshot
version: 2.2.3
repository: https://charts.bitnami.com/bitnami
- name: cloudflared
alias: cloudflared-synapse
version: 1.13.0
repository: http://alexlebens.github.io/helm-charts
- name: cloudflared
alias: cloudflared-hookshot
version: 1.13.0
repository: http://alexlebens.github.io/helm-charts
- name: postgres-cluster
alias: postgres-17-cluster
version: 4.1.4
repository: http://alexlebens.github.io/helm-charts
icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/matrix.png
appVersion: 1.121.1

View File

@@ -239,182 +239,182 @@ spec:
metadataPolicy: None metadataPolicy: None
property: token property: token
--- # ---
apiVersion: external-secrets.io/v1beta1 # apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret # kind: ExternalSecret
metadata: # metadata:
name: matrix-synapse-backup-secret # name: matrix-synapse-backup-secret
namespace: {{ .Release.Namespace }} # namespace: {{ .Release.Namespace }}
labels: # labels:
app.kubernetes.io/name: matrix-synapse-backup-secret # app.kubernetes.io/name: matrix-synapse-backup-secret
app.kubernetes.io/instance: {{ .Release.Name }} # app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }} # app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: backup # app.kubernetes.io/component: backup
app.kubernetes.io/part-of: {{ .Release.Name }} # app.kubernetes.io/part-of: {{ .Release.Name }}
spec: # spec:
secretStoreRef: # secretStoreRef:
kind: ClusterSecretStore # kind: ClusterSecretStore
name: vault # name: vault
target: # target:
template: # template:
mergePolicy: Merge # mergePolicy: Merge
engineVersion: v2 # engineVersion: v2
data: # data:
RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/matrix-synapse/matrix-synapse" # RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/matrix-synapse/matrix-synapse"
data: # data:
- secretKey: BUCKET_ENDPOINT # - secretKey: BUCKET_ENDPOINT
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /cl01tl/volsync/restic/config # key: /cl01tl/volsync/restic/config
metadataPolicy: None # metadataPolicy: None
property: S3_BUCKET_ENDPOINT # property: S3_BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD # - secretKey: RESTIC_PASSWORD
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /cl01tl/volsync/restic/config # key: /cl01tl/volsync/restic/config
metadataPolicy: None # metadataPolicy: None
property: RESTIC_PASSWORD # property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION # - secretKey: AWS_DEFAULT_REGION
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /cl01tl/volsync/restic/config # key: /cl01tl/volsync/restic/config
metadataPolicy: None # metadataPolicy: None
property: AWS_DEFAULT_REGION # property: AWS_DEFAULT_REGION
- secretKey: AWS_ACCESS_KEY_ID # - secretKey: AWS_ACCESS_KEY_ID
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups # key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None # metadataPolicy: None
property: access_key # property: access_key
- secretKey: AWS_SECRET_ACCESS_KEY # - secretKey: AWS_SECRET_ACCESS_KEY
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups # key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None # metadataPolicy: None
property: secret_key # property: secret_key
--- # ---
apiVersion: external-secrets.io/v1beta1 # apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret # kind: ExternalSecret
metadata: # metadata:
name: mautrix-discord-data-backup-secret # name: mautrix-discord-data-backup-secret
namespace: {{ .Release.Namespace }} # namespace: {{ .Release.Namespace }}
labels: # labels:
app.kubernetes.io/name: mautrix-discord-data-backup-secret # app.kubernetes.io/name: mautrix-discord-data-backup-secret
app.kubernetes.io/instance: {{ .Release.Name }} # app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }} # app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: backup # app.kubernetes.io/component: backup
app.kubernetes.io/part-of: {{ .Release.Name }} # app.kubernetes.io/part-of: {{ .Release.Name }}
spec: # spec:
secretStoreRef: # secretStoreRef:
kind: ClusterSecretStore # kind: ClusterSecretStore
name: vault # name: vault
target: # target:
template: # template:
mergePolicy: Merge # mergePolicy: Merge
engineVersion: v2 # engineVersion: v2
data: # data:
RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/matrix-synapse/mautrix-discord-data" # RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/matrix-synapse/mautrix-discord-data"
data: # data:
- secretKey: BUCKET_ENDPOINT # - secretKey: BUCKET_ENDPOINT
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /cl01tl/volsync/restic/config # key: /cl01tl/volsync/restic/config
metadataPolicy: None # metadataPolicy: None
property: S3_BUCKET_ENDPOINT # property: S3_BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD # - secretKey: RESTIC_PASSWORD
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /cl01tl/volsync/restic/config # key: /cl01tl/volsync/restic/config
metadataPolicy: None # metadataPolicy: None
property: RESTIC_PASSWORD # property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION # - secretKey: AWS_DEFAULT_REGION
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /cl01tl/volsync/restic/config # key: /cl01tl/volsync/restic/config
metadataPolicy: None # metadataPolicy: None
property: AWS_DEFAULT_REGION # property: AWS_DEFAULT_REGION
- secretKey: AWS_ACCESS_KEY_ID # - secretKey: AWS_ACCESS_KEY_ID
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups # key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None # metadataPolicy: None
property: access_key # property: access_key
- secretKey: AWS_SECRET_ACCESS_KEY # - secretKey: AWS_SECRET_ACCESS_KEY
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups # key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None # metadataPolicy: None
property: secret_key # property: secret_key
--- # ---
apiVersion: external-secrets.io/v1beta1 # apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret # kind: ExternalSecret
metadata: # metadata:
name: mautrix-whatsapp-data-backup-secret # name: mautrix-whatsapp-data-backup-secret
namespace: {{ .Release.Namespace }} # namespace: {{ .Release.Namespace }}
labels: # labels:
app.kubernetes.io/name: mautrix-whatsapp-data-backup-secret # app.kubernetes.io/name: mautrix-whatsapp-data-backup-secret
app.kubernetes.io/instance: {{ .Release.Name }} # app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }} # app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: backup # app.kubernetes.io/component: backup
app.kubernetes.io/part-of: {{ .Release.Name }} # app.kubernetes.io/part-of: {{ .Release.Name }}
spec: # spec:
secretStoreRef: # secretStoreRef:
kind: ClusterSecretStore # kind: ClusterSecretStore
name: vault # name: vault
target: # target:
template: # template:
mergePolicy: Merge # mergePolicy: Merge
engineVersion: v2 # engineVersion: v2
data: # data:
RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/matrix-synapse/mautrix-whatsapp-data" # RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/matrix-synapse/mautrix-whatsapp-data"
data: # data:
- secretKey: BUCKET_ENDPOINT # - secretKey: BUCKET_ENDPOINT
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /cl01tl/volsync/restic/config # key: /cl01tl/volsync/restic/config
metadataPolicy: None # metadataPolicy: None
property: S3_BUCKET_ENDPOINT # property: S3_BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD # - secretKey: RESTIC_PASSWORD
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /cl01tl/volsync/restic/config # key: /cl01tl/volsync/restic/config
metadataPolicy: None # metadataPolicy: None
property: RESTIC_PASSWORD # property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION # - secretKey: AWS_DEFAULT_REGION
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /cl01tl/volsync/restic/config # key: /cl01tl/volsync/restic/config
metadataPolicy: None # metadataPolicy: None
property: AWS_DEFAULT_REGION # property: AWS_DEFAULT_REGION
- secretKey: AWS_ACCESS_KEY_ID # - secretKey: AWS_ACCESS_KEY_ID
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups # key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None # metadataPolicy: None
property: access_key # property: access_key
- secretKey: AWS_SECRET_ACCESS_KEY # - secretKey: AWS_SECRET_ACCESS_KEY
remoteRef: # remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups # key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None # metadataPolicy: None
property: secret_key # property: secret_key
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1

View File

@@ -0,0 +1,91 @@
# apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource
# metadata:
# name: matrix-synapse-backup-source
# namespace: {{ .Release.Namespace }}
# labels:
# app.kubernetes.io/name: matrix-synapse-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }}
# spec:
# sourcePVC: matrix-synapse
# trigger:
# schedule: 0 0 */3 * *
# restic:
# pruneIntervalDays: 14
# repository: matrix-synapse-backup-secret
# retain:
# hourly: 1
# daily: 1
# weekly: 1
# monthly: 2
# yearly: 4
# copyMethod: Snapshot
# storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot
# ---
# apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource
# metadata:
# name: mautrix-discord-data-backup-source
# namespace: {{ .Release.Namespace }}
# labels:
# app.kubernetes.io/name: mautrix-discord-data-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }}
# spec:
# sourcePVC: mautrix-discord-data
# trigger:
# schedule: 0 0 */3 * *
# restic:
# pruneIntervalDays: 14
# repository: mautrix-discord-data-backup-secret
# retain:
# hourly: 1
# daily: 1
# weekly: 1
# monthly: 2
# yearly: 4
# moverSecurityContext:
# runAsUser: 1337
# runAsGroup: 1337
# copyMethod: Snapshot
# storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot
# ---
# apiVersion: volsync.backube/v1alpha1
# kind: ReplicationSource
# metadata:
# name: mautrix-whatsapp-data-backup-source
# namespace: {{ .Release.Namespace }}
# labels:
# app.kubernetes.io/name: mautrix-whatsapp-data-backup-source
# app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }}
# spec:
# sourcePVC: mautrix-whatsapp-data
# trigger:
# schedule: 0 0 */3 * *
# restic:
# pruneIntervalDays: 14
# repository: mautrix-whatsapp-data-backup-secret
# retain:
# hourly: 1
# daily: 1
# weekly: 1
# monthly: 2
# yearly: 4
# moverSecurityContext:
# runAsUser: 1337
# runAsGroup: 1337
# copyMethod: Snapshot
# storageClassName: ceph-block
# volumeSnapshotClassName: ceph-blockpool-snapshot

View File

@@ -1,91 +0,0 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: matrix-synapse-backup-source
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: matrix-synapse-backup-source
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: backup
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
sourcePVC: matrix-synapse
trigger:
schedule: 0 0 */3 * *
restic:
pruneIntervalDays: 14
repository: matrix-synapse-backup-secret
retain:
hourly: 1
daily: 1
weekly: 1
monthly: 2
yearly: 4
copyMethod: Snapshot
storageClassName: ceph-block-delete
volumeSnapshotClassName: ceph-blockpool-snapshot
---
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: mautrix-discord-data-backup-source
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: mautrix-discord-data-backup-source
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: backup
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
sourcePVC: mautrix-discord-data
trigger:
schedule: 0 0 */3 * *
restic:
pruneIntervalDays: 14
repository: mautrix-discord-data-backup-secret
retain:
hourly: 1
daily: 1
weekly: 1
monthly: 2
yearly: 4
moverSecurityContext:
runAsUser: 1337
runAsGroup: 1337
copyMethod: Snapshot
storageClassName: ceph-block-delete
volumeSnapshotClassName: ceph-blockpool-snapshot
---
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: mautrix-whatsapp-data-backup-source
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: mautrix-whatsapp-data-backup-source
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: backup
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
sourcePVC: mautrix-whatsapp-data
trigger:
schedule: 0 0 */3 * *
restic:
pruneIntervalDays: 14
repository: mautrix-whatsapp-data-backup-secret
retain:
hourly: 1
daily: 1
weekly: 1
monthly: 2
yearly: 4
moverSecurityContext:
runAsUser: 1337
runAsGroup: 1337
copyMethod: Snapshot
storageClassName: ceph-block-delete
volumeSnapshotClassName: ceph-blockpool-snapshot

View File

@@ -0,0 +1,40 @@
apiVersion: v2
name: stalwart
version: 1.0.0
description: Stalwart
keywords:
- stalwart
- email
- smtp
home: https://wiki.alexlebens.dev/doc/stalwart-mail-server-RxyiB7jWwR
sources:
- https://github.com/stalwartlabs/mail-server
- https://github.com/minio/operator
- https://github.com/valkey-io/valkey
- https://github.com/elastic/elasticsearch
- https://github.com/cloudnative-pg/cloudnative-pg
- https://hub.docker.com/r/stalwartlabs/mail-server
- https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template
- https://github.com/minio/operator/tree/master/helm/tenant
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
- https://github.com/bitnami/charts/tree/main/bitnami/elasticsearch
- https://github.com/alexlebens/helm-charts/tree/main/charts/postgres-cluster
maintainers:
- name: alexlebens
dependencies:
- name: app-template
alias: stalwart
version: 3.6.1
repository: https://bjw-s.github.io/helm-charts/
- name: valkey
version: 2.2.3
repository: https://charts.bitnami.com/bitnami
- name: elasticsearch
version: 21.4.5
repository: https://charts.bitnami.com/bitnami
- name: postgres-cluster
alias: postgres-17-cluster
version: 4.1.4
repository: http://alexlebens.github.io/helm-charts
icon: https://raw.githubusercontent.com/stalwartlabs/website/main/static/img/logo.png
appVersion: v0.10.7

View File

@@ -23,5 +23,5 @@ spec:
monthly: 2 monthly: 2
yearly: 4 yearly: 4
copyMethod: Snapshot copyMethod: Snapshot
storageClassName: ceph-block-delete storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot volumeSnapshotClassName: ceph-blockpool-snapshot