Automated Manifest Update (#4651)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #4651
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-config-backup-secret-remote.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: postiz-config-backup-secret-remote
+  namespace: postiz
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: postiz
+    app.kubernetes.io/part-of: postiz
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: postiz-config-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/postiz/postiz-config"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-uploads-backup-secret-remote.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: postiz-uploads-backup-secret-remote
+  namespace: postiz
+  labels:
+    helm.sh/chart: volsync-target-upload-0.8.0
+    app.kubernetes.io/instance: postiz
+    app.kubernetes.io/part-of: postiz
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: postiz-uploads-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/postiz/postiz-uploads"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-config-backup-source-external.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: postiz-config
   trigger:
-    schedule: 56 9 * * *
+    schedule: 52 10 * * *
   restic:
     pruneIntervalDays: 7
     repository: postiz-config-backup-secret-external

clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-config-backup-source-local.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: postiz-config
   trigger:
-    schedule: 56 8 * * *
+    schedule: 52 8 * * *
   restic:
     pruneIntervalDays: 7
     repository: postiz-config-backup-secret-local

clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-config-backup-source-remote.yaml

@@ -0,0 +1,29 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: postiz-config-backup-source-remote
+  namespace: postiz
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: postiz
+    app.kubernetes.io/part-of: postiz
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: postiz-config-backup
+spec:
+  sourcePVC: postiz-config
+  trigger:
+    schedule: 52 9 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: postiz-config-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-uploads-backup-source-external.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: postiz-uploads
   trigger:
-    schedule: 58 9 * * *
+    schedule: 54 10 * * *
   restic:
     pruneIntervalDays: 7
     repository: postiz-uploads-backup-secret-external

clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-uploads-backup-source-local.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: postiz-uploads
   trigger:
-    schedule: 58 8 * * *
+    schedule: 54 8 * * *
   restic:
     pruneIntervalDays: 7
     repository: postiz-uploads-backup-secret-local

clusters/cl01tl/manifests/postiz/ReplicationSource-postiz-uploads-backup-source-remote.yaml

@@ -0,0 +1,29 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: postiz-uploads-backup-source-remote
+  namespace: postiz
+  labels:
+    helm.sh/chart: volsync-target-upload-0.8.0
+    app.kubernetes.io/instance: postiz
+    app.kubernetes.io/part-of: postiz
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: postiz-uploads-backup
+spec:
+  sourcePVC: postiz-uploads
+  trigger:
+    schedule: 54 9 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: postiz-uploads-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/prowlarr/ExternalSecret-prowlarr-config-backup-secret-remote.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: prowlarr-config-backup-secret-remote
+  namespace: prowlarr
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: prowlarr
+    app.kubernetes.io/part-of: prowlarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: prowlarr-config-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/prowlarr/prowlarr-config"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/prowlarr/ReplicationSource-prowlarr-config-backup-source-external.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: prowlarr-config
   trigger:
-    schedule: 0 12 * * *
+    schedule: 56 10 * * *
   restic:
     pruneIntervalDays: 7
     repository: prowlarr-config-backup-secret-external

clusters/cl01tl/manifests/prowlarr/ReplicationSource-prowlarr-config-backup-source-local.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: prowlarr-config
   trigger:
-    schedule: 0 11 * * *
+    schedule: 56 8 * * *
   restic:
     pruneIntervalDays: 7
     repository: prowlarr-config-backup-secret-local

clusters/cl01tl/manifests/prowlarr/ReplicationSource-prowlarr-config-backup-source-remote.yaml

@@ -0,0 +1,39 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: prowlarr-config-backup-source-remote
+  namespace: prowlarr
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: prowlarr
+    app.kubernetes.io/part-of: prowlarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: prowlarr-config-backup
+spec:
+  sourcePVC: prowlarr-config
+  trigger:
+    schedule: 56 9 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: prowlarr-config-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    moverSecurityContext:
+      fsGroup: 568
+      fsGroupChangePolicy: OnRootMismatch
+      runAsGroup: 568
+      runAsUser: 568
+      supplementalGroups:
+        - 44
+        - 100
+        - 109
+        - 65539
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/qbittorrent/ExternalSecret-qbittorrent-config-data-backup-secret-remote.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: qbittorrent-config-data-backup-secret-remote
+  namespace: qbittorrent
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/part-of: qbittorrent
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent-config-data-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/qbittorrent/qbittorrent-config-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/qbittorrent/ExternalSecret-qbittorrent-qbit-manage-config-data-backup-secret-remote.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: qbittorrent-qbit-manage-config-data-backup-secret-remote
+  namespace: qbittorrent
+  labels:
+    helm.sh/chart: volsync-target-qbit-manage-config-0.8.0
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/part-of: qbittorrent
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent-qbit-manage-config-data-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/qbittorrent/qbittorrent-qbit-manage-config-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/qbittorrent/ExternalSecret-qbittorrent-qui-config-data-backup-secret-remote.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: qbittorrent-qui-config-data-backup-secret-remote
+  namespace: qbittorrent
+  labels:
+    helm.sh/chart: volsync-target-qui-config-0.8.0
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/part-of: qbittorrent
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent-qui-config-data-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/qbittorrent/qbittorrent-qui-config-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/qbittorrent/ReplicationSource-qbittorrent-config-data-backup-source-external.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: qbittorrent-config-data
   trigger:
-    schedule: 2 12 * * *
+    schedule: 58 10 * * *
   restic:
     pruneIntervalDays: 7
     repository: qbittorrent-config-data-backup-secret-external

clusters/cl01tl/manifests/qbittorrent/ReplicationSource-qbittorrent-config-data-backup-source-local.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: qbittorrent-config-data
   trigger:
-    schedule: 2 11 * * *
+    schedule: 58 8 * * *
   restic:
     pruneIntervalDays: 7
     repository: qbittorrent-config-data-backup-secret-local

clusters/cl01tl/manifests/qbittorrent/ReplicationSource-qbittorrent-config-data-backup-source-remote.yaml

@@ -0,0 +1,34 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: qbittorrent-config-data-backup-source-remote
+  namespace: qbittorrent
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/part-of: qbittorrent
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent-config-data-backup
+spec:
+  sourcePVC: qbittorrent-config-data
+  trigger:
+    schedule: 58 9 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: qbittorrent-config-data-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    moverSecurityContext:
+      fsGroup: 1000
+      fsGroupChangePolicy: OnRootMismatch
+      runAsGroup: 1000
+      runAsUser: 1000
+    copyMethod: Snapshot
+    storageClassName: ceph-filesystem
+    volumeSnapshotClassName: ceph-filesystem-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/qbittorrent/ReplicationSource-qbittorrent-qbit-manage-config-data-backup-source-external.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: qbittorrent-qbit-manage-config-data
   trigger:
-    schedule: 4 12 * * *
+    schedule: 0 13 * * *
   restic:
     pruneIntervalDays: 7
     repository: qbittorrent-qbit-manage-config-data-backup-secret-external

clusters/cl01tl/manifests/qbittorrent/ReplicationSource-qbittorrent-qbit-manage-config-data-backup-source-local.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: qbittorrent-qbit-manage-config-data
   trigger:
-    schedule: 4 11 * * *
+    schedule: 0 11 * * *
   restic:
     pruneIntervalDays: 7
     repository: qbittorrent-qbit-manage-config-data-backup-secret-local

clusters/cl01tl/manifests/qbittorrent/ReplicationSource-qbittorrent-qbit-manage-config-data-backup-source-remote.yaml

@@ -0,0 +1,29 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: qbittorrent-qbit-manage-config-data-backup-source-remote
+  namespace: qbittorrent
+  labels:
+    helm.sh/chart: volsync-target-qbit-manage-config-0.8.0
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/part-of: qbittorrent
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent-qbit-manage-config-data-backup
+spec:
+  sourcePVC: qbittorrent-qbit-manage-config-data
+  trigger:
+    schedule: 0 12 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: qbittorrent-qbit-manage-config-data-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/qbittorrent/ReplicationSource-qbittorrent-qui-config-data-backup-source-external.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: qbittorrent-qui-config-data
   trigger:
-    schedule: 6 12 * * *
+    schedule: 2 13 * * *
   restic:
     pruneIntervalDays: 7
     repository: qbittorrent-qui-config-data-backup-secret-external

clusters/cl01tl/manifests/qbittorrent/ReplicationSource-qbittorrent-qui-config-data-backup-source-local.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: qbittorrent-qui-config-data
   trigger:
-    schedule: 6 11 * * *
+    schedule: 2 11 * * *
   restic:
     pruneIntervalDays: 7
     repository: qbittorrent-qui-config-data-backup-secret-local

clusters/cl01tl/manifests/qbittorrent/ReplicationSource-qbittorrent-qui-config-data-backup-source-remote.yaml

@@ -0,0 +1,29 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: qbittorrent-qui-config-data-backup-source-remote
+  namespace: qbittorrent
+  labels:
+    helm.sh/chart: volsync-target-qui-config-0.8.0
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/part-of: qbittorrent
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent-qui-config-data-backup
+spec:
+  sourcePVC: qbittorrent-qui-config-data
+  trigger:
+    schedule: 2 12 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: qbittorrent-qui-config-data-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/radarr-4k/ExternalSecret-radarr-4k-config-backup-secret-remote.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: radarr-4k-config-backup-secret-remote
+  namespace: radarr-4k
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: radarr-4k
+    app.kubernetes.io/part-of: radarr-4k
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-4k-config-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/radarr-4k/radarr-4k-config"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/radarr-4k/ReplicationSource-radarr-4k-config-backup-source-external.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: radarr-4k-config
   trigger:
-    schedule: 10 12 * * *
+    schedule: 6 13 * * *
   restic:
     pruneIntervalDays: 7
     repository: radarr-4k-config-backup-secret-external

clusters/cl01tl/manifests/radarr-4k/ReplicationSource-radarr-4k-config-backup-source-local.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: radarr-4k-config
   trigger:
-    schedule: 10 11 * * *
+    schedule: 6 11 * * *
   restic:
     pruneIntervalDays: 7
     repository: radarr-4k-config-backup-secret-local

clusters/cl01tl/manifests/radarr-4k/ReplicationSource-radarr-4k-config-backup-source-remote.yaml

@@ -0,0 +1,34 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: radarr-4k-config-backup-source-remote
+  namespace: radarr-4k
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: radarr-4k
+    app.kubernetes.io/part-of: radarr-4k
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-4k-config-backup
+spec:
+  sourcePVC: radarr-4k-config
+  trigger:
+    schedule: 6 12 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: radarr-4k-config-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    moverSecurityContext:
+      fsGroup: 1000
+      fsGroupChangePolicy: OnRootMismatch
+      runAsGroup: 1000
+      runAsUser: 1000
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/radarr-anime/ExternalSecret-radarr-anime-config-backup-secret-remote.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: radarr-anime-config-backup-secret-remote
+  namespace: radarr-anime
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: radarr-anime
+    app.kubernetes.io/part-of: radarr-anime
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-anime-config-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/radarr-anime/radarr-anime-config"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/radarr-anime/ReplicationSource-radarr-anime-config-backup-source-external.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: radarr-anime-config
   trigger:
-    schedule: 12 12 * * *
+    schedule: 8 13 * * *
   restic:
     pruneIntervalDays: 7
     repository: radarr-anime-config-backup-secret-external

clusters/cl01tl/manifests/radarr-anime/ReplicationSource-radarr-anime-config-backup-source-local.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: radarr-anime-config
   trigger:
-    schedule: 12 11 * * *
+    schedule: 8 11 * * *
   restic:
     pruneIntervalDays: 7
     repository: radarr-anime-config-backup-secret-local

clusters/cl01tl/manifests/radarr-anime/ReplicationSource-radarr-anime-config-backup-source-remote.yaml

@@ -0,0 +1,34 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: radarr-anime-config-backup-source-remote
+  namespace: radarr-anime
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: radarr-anime
+    app.kubernetes.io/part-of: radarr-anime
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-anime-config-backup
+spec:
+  sourcePVC: radarr-anime-config
+  trigger:
+    schedule: 8 12 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: radarr-anime-config-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    moverSecurityContext:
+      fsGroup: 1000
+      fsGroupChangePolicy: OnRootMismatch
+      runAsGroup: 1000
+      runAsUser: 1000
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/radarr-standup/ExternalSecret-radarr-standup-config-backup-secret-remote.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: radarr-standup-config-backup-secret-remote
+  namespace: radarr-standup
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: radarr-standup
+    app.kubernetes.io/part-of: radarr-standup
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-standup-config-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/radarr-standup/radarr-standup-config"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/radarr-standup/ReplicationSource-radarr-standup-config-backup-source-external.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: radarr-standup-config
   trigger:
-    schedule: 14 12 * * *
+    schedule: 10 13 * * *
   restic:
     pruneIntervalDays: 7
     repository: radarr-standup-config-backup-secret-external

clusters/cl01tl/manifests/radarr-standup/ReplicationSource-radarr-standup-config-backup-source-local.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: radarr-standup-config
   trigger:
-    schedule: 14 11 * * *
+    schedule: 10 11 * * *
   restic:
     pruneIntervalDays: 7
     repository: radarr-standup-config-backup-secret-local

clusters/cl01tl/manifests/radarr-standup/ReplicationSource-radarr-standup-config-backup-source-remote.yaml

@@ -0,0 +1,34 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: radarr-standup-config-backup-source-remote
+  namespace: radarr-standup
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: radarr-standup
+    app.kubernetes.io/part-of: radarr-standup
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-standup-config-backup
+spec:
+  sourcePVC: radarr-standup-config
+  trigger:
+    schedule: 10 12 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: radarr-standup-config-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    moverSecurityContext:
+      fsGroup: 1000
+      fsGroupChangePolicy: OnRootMismatch
+      runAsGroup: 1000
+      runAsUser: 1000
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/radarr/ExternalSecret-radarr-config-backup-secret-remote.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: radarr-config-backup-secret-remote
+  namespace: radarr
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: radarr
+    app.kubernetes.io/part-of: radarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-config-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/radarr/radarr-config"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/radarr/ReplicationSource-radarr-config-backup-source-external.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: radarr-config
   trigger:
-    schedule: 8 12 * * *
+    schedule: 4 13 * * *
   restic:
     pruneIntervalDays: 7
     repository: radarr-config-backup-secret-external

clusters/cl01tl/manifests/radarr/ReplicationSource-radarr-config-backup-source-local.yaml

@@ -13,7 +13,7 @@ metadata:
 spec:
   sourcePVC: radarr-config
   trigger:
-    schedule: 8 11 * * *
+    schedule: 4 11 * * *
   restic:
     pruneIntervalDays: 7
     repository: radarr-config-backup-secret-local

clusters/cl01tl/manifests/radarr/ReplicationSource-radarr-config-backup-source-remote.yaml

@@ -0,0 +1,34 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: radarr-config-backup-source-remote
+  namespace: radarr
+  labels:
+    helm.sh/chart: volsync-target-config-0.8.0
+    app.kubernetes.io/instance: radarr
+    app.kubernetes.io/part-of: radarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-config-backup
+spec:
+  sourcePVC: radarr-config
+  trigger:
+    schedule: 4 12 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: radarr-config-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    moverSecurityContext:
+      fsGroup: 1000
+      fsGroupChangePolicy: OnRootMismatch
+      runAsGroup: 1000
+      runAsUser: 1000
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi