From 4c2dcefc24dc7dbc55c5fd08e91595f818d85242 Mon Sep 17 00:00:00 2001 From: Alex Lebens Date: Thu, 23 Oct 2025 18:02:58 -0500 Subject: [PATCH] add garage backups --- .../freshrss/templates/external-secret.yaml | 8 ++--- .../immich/templates/external-secrets.yaml | 8 ++--- .../jellystat/templates/external-secret.yaml | 8 ++--- .../lidarr/templates/external-secret.yaml | 8 ++--- .../outline/templates/external-secret.yaml | 30 +++++++++++++++++++ .../cl01tl/applications/outline/values.yaml | 14 +++++++++ 6 files changed, 60 insertions(+), 16 deletions(-) diff --git a/clusters/cl01tl/applications/freshrss/templates/external-secret.yaml b/clusters/cl01tl/applications/freshrss/templates/external-secret.yaml index 209507b79..72208f337 100644 --- a/clusters/cl01tl/applications/freshrss/templates/external-secret.yaml +++ b/clusters/cl01tl/applications/freshrss/templates/external-secret.yaml @@ -200,13 +200,13 @@ spec: remoteRef: conversionStrategy: Default decodingStrategy: None - key: /digital-ocean/home-infra/postgres-backups + key: /garage/home-infra/postgres-backups metadataPolicy: None - property: access + property: ACCESS_KEY_ID - secretKey: ACCESS_SECRET_KEY remoteRef: conversionStrategy: Default decodingStrategy: None - key: /digital-ocean/home-infra/postgres-backups + key: /garage/home-infra/postgres-backups metadataPolicy: None - property: secret + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/applications/immich/templates/external-secrets.yaml b/clusters/cl01tl/applications/immich/templates/external-secrets.yaml index 14ef813b8..1aaf92389 100644 --- a/clusters/cl01tl/applications/immich/templates/external-secrets.yaml +++ b/clusters/cl01tl/applications/immich/templates/external-secrets.yaml @@ -69,13 +69,13 @@ spec: remoteRef: conversionStrategy: Default decodingStrategy: None - key: /digital-ocean/home-infra/postgres-backups + key: /garage/home-infra/postgres-backups metadataPolicy: None - property: access + property: ACCESS_KEY_ID - secretKey: ACCESS_SECRET_KEY remoteRef: conversionStrategy: Default decodingStrategy: None - key: /digital-ocean/home-infra/postgres-backups + key: /garage/home-infra/postgres-backups metadataPolicy: None - property: secret + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/applications/jellystat/templates/external-secret.yaml b/clusters/cl01tl/applications/jellystat/templates/external-secret.yaml index dd2791e70..1588f1b86 100644 --- a/clusters/cl01tl/applications/jellystat/templates/external-secret.yaml +++ b/clusters/cl01tl/applications/jellystat/templates/external-secret.yaml @@ -140,13 +140,13 @@ spec: remoteRef: conversionStrategy: Default decodingStrategy: None - key: /digital-ocean/home-infra/postgres-backups + key: /garage/home-infra/postgres-backups metadataPolicy: None - property: access + property: ACCESS_KEY_ID - secretKey: ACCESS_SECRET_KEY remoteRef: conversionStrategy: Default decodingStrategy: None - key: /digital-ocean/home-infra/postgres-backups + key: /garage/home-infra/postgres-backups metadataPolicy: None - property: secret + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/applications/lidarr/templates/external-secret.yaml b/clusters/cl01tl/applications/lidarr/templates/external-secret.yaml index 8dad3631a..c60702fb4 100644 --- a/clusters/cl01tl/applications/lidarr/templates/external-secret.yaml +++ b/clusters/cl01tl/applications/lidarr/templates/external-secret.yaml @@ -103,13 +103,13 @@ spec: remoteRef: conversionStrategy: Default decodingStrategy: None - key: /digital-ocean/home-infra/postgres-backups + key: /garage/home-infra/postgres-backups metadataPolicy: None - property: access + property: ACCESS_KEY_ID - secretKey: ACCESS_SECRET_KEY remoteRef: conversionStrategy: Default decodingStrategy: None - key: /digital-ocean/home-infra/postgres-backups + key: /garage/home-infra/postgres-backups metadataPolicy: None - property: secret + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/applications/outline/templates/external-secret.yaml b/clusters/cl01tl/applications/outline/templates/external-secret.yaml index 8373b40fc..aa98fffc7 100644 --- a/clusters/cl01tl/applications/outline/templates/external-secret.yaml +++ b/clusters/cl01tl/applications/outline/templates/external-secret.yaml @@ -109,3 +109,33 @@ spec: key: /digital-ocean/home-infra/postgres-backups metadataPolicy: None property: secret + +--- +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: outline-postgresql-17-cluster-backup-secret-weekly + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: outline-postgresql-17-cluster-backup-secret-weekly + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/postgres-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/postgres-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/applications/outline/values.yaml b/clusters/cl01tl/applications/outline/values.yaml index a3c4d9294..6b99291f0 100644 --- a/clusters/cl01tl/applications/outline/values.yaml +++ b/clusters/cl01tl/applications/outline/values.yaml @@ -167,8 +167,22 @@ postgres-17-cluster: destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/outline/outline-postgresql-17-cluster index: 1 retentionPolicy: "2d" + - name: garage + destinationPath: s3://postgres-backups/cl01tl/outline/outline-postgresql-17-cluster + index: 1 + endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900 + endpointCredentials: outline-postgresql-17-cluster-backup-secret-weekly + retentionPolicy: "30d" + isWALArchiver: false + data: + compression: bzip2 + jobs: 2 scheduledBackups: - name: daily-backup suspend: false schedule: "0 0 0 * * *" backupName: external + - name: weekly-backup + suspend: false + schedule: "0 0 4 * * SAT" + backupName: garage