rclone:
  controllers:
    postgres-backups:
      type: cronjob
      cronjob:
        suspend: false
        timeZone: America/Chicago
        schedule: 40 0 * * *
        backoffLimit: 3
        parallelism: 1
      containers:
        sync:
          image:
            repository: rclone/rclone
            tag: 1.73.5@sha256:1619a625f845e169c34b952cf40c483c0392965b821c5155cde8cbfd35254a96
          args:
            - sync
            - src:postgres-backups
            - dest:postgres-backups
            - --s3-no-check-bucket
            - --max-age
            - 30d
            - --include
            - "/cl01tl/*/*/*/base/**"
            - --exclude
            - "**/walls/**"
            - --verbose
          env:
            - name: RCLONE_S3_PROVIDER
              value: Other
            - name: RCLONE_CONFIG_SRC_TYPE
              value: s3
            - name: RCLONE_CONFIG_SRC_PROVIDER
              value: Other
            - name: RCLONE_CONFIG_SRC_ENV_AUTH
              value: false
            - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: ACCESS_KEY_ID
            - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: ACCESS_SECRET_KEY
            - name: RCLONE_CONFIG_SRC_REGION
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: ACCESS_REGION
            - name: RCLONE_CONFIG_SRC_ENDPOINT
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: SRC_ENDPOINT
            - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
              value: true
            - name: RCLONE_CONFIG_DEST_TYPE
              value: s3
            - name: RCLONE_CONFIG_DEST_PROVIDER
              value: Other
            - name: RCLONE_CONFIG_DEST_ENV_AUTH
              value: false
            - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: ACCESS_KEY_ID
            - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: ACCESS_SECRET_KEY
            - name: RCLONE_CONFIG_DEST_REGION
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: ACCESS_REGION
            - name: RCLONE_CONFIG_DEST_ENDPOINT
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: DEST_ENDPOINT
            - name: RCLONE_CONFIG_SRC_DEST_FORCE_PATH_STYLE
              value: true
        prune:
          image:
            repository: rclone/rclone
            tag: 1.73.5@sha256:1619a625f845e169c34b952cf40c483c0392965b821c5155cde8cbfd35254a96
          args:
            - delete
            - dest:postgres-backups
            - --min-age
            - 30d
            - --verbose
          env:
            - name: RCLONE_CONFIG_DEST_TYPE
              value: s3
            - name: RCLONE_CONFIG_DEST_PROVIDER
              value: Other
            - name: RCLONE_CONFIG_DEST_ENV_AUTH
              value: false
            - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: ACCESS_KEY_ID
            - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: ACCESS_SECRET_KEY
            - name: RCLONE_CONFIG_DEST_REGION
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: ACCESS_REGION
            - name: RCLONE_CONFIG_DEST_ENDPOINT
              valueFrom:
                secretKeyRef:
                  name: garage-postgres-backups-secret
                  key: DEST_ENDPOINT
            - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
              value: true
rclone-web-assets-remote:
  cronJob:
    suspend: false
    schedule: 30 0 * * *
  rclone:
    source:
      bucketName: web-assets
    destination:
      bucketName: web-assets
  secret:
    externalSecret:
      source:
        credentials:
          path: /garage/home-infra/web-assets
        config:
          path: /garage/config
      destination:
        credentials:
          path: /garage/home-infra/web-assets
        config:
          path: /garage/config