506 lines
17 KiB
YAML
506 lines
17 KiB
YAML
rclone:
|
|
controllers:
|
|
directus-assets:
|
|
type: cronjob
|
|
cronjob:
|
|
suspend: false
|
|
concurrencyPolicy: Forbid
|
|
timeZone: US/Central
|
|
schedule: "0 0 * * *"
|
|
startingDeadlineSeconds: 90
|
|
successfulJobsHistory: 1
|
|
failedJobsHistory: 1
|
|
backoffLimit: 3
|
|
parallelism: 1
|
|
containers:
|
|
sync:
|
|
image:
|
|
repository: rclone/rclone
|
|
tag: 1.73.2
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- sync
|
|
- src:directus-assets
|
|
- dest:directus-assets
|
|
- --s3-no-check-bucket
|
|
- --verbose
|
|
env:
|
|
- name: RCLONE_S3_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_SRC_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_SRC_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_SRC_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-directus-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-directus-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_SRC_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-directus-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_SRC_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-directus-secret
|
|
key: SRC_ENDPOINT
|
|
- name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
|
|
value: true
|
|
- name: RCLONE_CONFIG_DEST_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_DEST_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_DEST_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-directus-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-directus-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_DEST_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-directus-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_DEST_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-directus-secret
|
|
key: DEST_ENDPOINT
|
|
- name: RCLONE_CONFIG_DEST_S3_FORCE_PATH_STYLE
|
|
value: true
|
|
karakeep-assets:
|
|
type: cronjob
|
|
cronjob:
|
|
suspend: false
|
|
concurrencyPolicy: Forbid
|
|
timeZone: US/Central
|
|
schedule: "10 0 * * *"
|
|
startingDeadlineSeconds: 90
|
|
successfulJobsHistory: 1
|
|
failedJobsHistory: 1
|
|
backoffLimit: 3
|
|
parallelism: 1
|
|
containers:
|
|
sync:
|
|
image:
|
|
repository: rclone/rclone
|
|
tag: 1.73.2
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- sync
|
|
- src:karakeep-assets
|
|
- dest:karakeep-assets
|
|
- --s3-no-check-bucket
|
|
- --verbose
|
|
env:
|
|
- name: RCLONE_S3_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_SRC_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_SRC_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_SRC_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-karakeep-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-karakeep-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_SRC_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-karakeep-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_SRC_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-karakeep-secret
|
|
key: SRC_ENDPOINT
|
|
- name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
|
|
value: true
|
|
- name: RCLONE_CONFIG_DEST_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_DEST_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_DEST_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-karakeep-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-karakeep-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_DEST_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-karakeep-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_DEST_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-karakeep-secret
|
|
key: DEST_ENDPOINT
|
|
- name: RCLONE_CONFIG_SRC_DEST_FORCE_PATH_STYLE
|
|
value: true
|
|
talos-backups:
|
|
type: cronjob
|
|
cronjob:
|
|
suspend: false
|
|
concurrencyPolicy: Forbid
|
|
timeZone: US/Central
|
|
schedule: "20 0 * * *"
|
|
startingDeadlineSeconds: 90
|
|
successfulJobsHistory: 1
|
|
failedJobsHistory: 1
|
|
backoffLimit: 3
|
|
parallelism: 1
|
|
containers:
|
|
sync:
|
|
image:
|
|
repository: rclone/rclone
|
|
tag: 1.73.2
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- sync
|
|
- src:talos-backups
|
|
- dest:talos-backups
|
|
- --s3-no-check-bucket
|
|
- --max-age
|
|
- 90d
|
|
- --verbose
|
|
env:
|
|
- name: RCLONE_S3_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_SRC_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_SRC_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_SRC_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_SRC_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_SRC_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: SRC_ENDPOINT
|
|
- name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
|
|
value: true
|
|
- name: RCLONE_CONFIG_DEST_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_DEST_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_DEST_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_DEST_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_DEST_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: DEST_ENDPOINT
|
|
- name: RCLONE_CONFIG_SRC_DEST_FORCE_PATH_STYLE
|
|
value: true
|
|
prune:
|
|
image:
|
|
repository: rclone/rclone
|
|
tag: 1.73.2
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- delete
|
|
- dest:talos-backups
|
|
- --min-age
|
|
- 90d
|
|
- --verbose
|
|
env:
|
|
- name: RCLONE_CONFIG_DEST_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_DEST_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_DEST_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_DEST_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_DEST_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-talos-backups-secret
|
|
key: DEST_ENDPOINT
|
|
- name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
|
|
value: true
|
|
web-assets:
|
|
type: cronjob
|
|
cronjob:
|
|
suspend: false
|
|
concurrencyPolicy: Forbid
|
|
timeZone: US/Central
|
|
schedule: "30 0 * * *"
|
|
startingDeadlineSeconds: 90
|
|
successfulJobsHistory: 1
|
|
failedJobsHistory: 1
|
|
backoffLimit: 3
|
|
parallelism: 1
|
|
containers:
|
|
sync:
|
|
image:
|
|
repository: rclone/rclone
|
|
tag: 1.73.2
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- sync
|
|
- src:web-assets
|
|
- dest:web-assets
|
|
- --s3-no-check-bucket
|
|
- --verbose
|
|
env:
|
|
- name: RCLONE_S3_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_SRC_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_SRC_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_SRC_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-web-assets-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-web-assets-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_SRC_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-web-assets-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_SRC_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-web-assets-secret
|
|
key: SRC_ENDPOINT
|
|
- name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
|
|
value: true
|
|
- name: RCLONE_CONFIG_DEST_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_DEST_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_DEST_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-web-assets-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-web-assets-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_DEST_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-web-assets-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_DEST_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-web-assets-secret
|
|
key: DEST_ENDPOINT
|
|
- name: RCLONE_CONFIG_DEST_S3_FORCE_PATH_STYLE
|
|
value: true
|
|
postgres-backups:
|
|
type: cronjob
|
|
cronjob:
|
|
suspend: false
|
|
concurrencyPolicy: Forbid
|
|
timeZone: US/Central
|
|
schedule: "40 0 * * *"
|
|
startingDeadlineSeconds: 90
|
|
successfulJobsHistory: 1
|
|
failedJobsHistory: 1
|
|
backoffLimit: 3
|
|
parallelism: 1
|
|
containers:
|
|
sync:
|
|
image:
|
|
repository: rclone/rclone
|
|
tag: 1.73.2
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- sync
|
|
- src:postgres-backups
|
|
- dest:postgres-backups
|
|
- --s3-no-check-bucket
|
|
- --max-age
|
|
- 30d
|
|
- --include
|
|
- "/cl01tl/*/*/*/base/**"
|
|
- --exclude
|
|
- "**/walls/**"
|
|
- --verbose
|
|
env:
|
|
- name: RCLONE_S3_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_SRC_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_SRC_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_SRC_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_SRC_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_SRC_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: SRC_ENDPOINT
|
|
- name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
|
|
value: true
|
|
- name: RCLONE_CONFIG_DEST_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_DEST_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_DEST_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_DEST_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_DEST_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: DEST_ENDPOINT
|
|
- name: RCLONE_CONFIG_SRC_DEST_FORCE_PATH_STYLE
|
|
value: true
|
|
prune:
|
|
image:
|
|
repository: rclone/rclone
|
|
tag: 1.73.2
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- delete
|
|
- dest:postgres-backups
|
|
- --min-age
|
|
- 30d
|
|
- --verbose
|
|
env:
|
|
- name: RCLONE_CONFIG_DEST_TYPE
|
|
value: s3
|
|
- name: RCLONE_CONFIG_DEST_PROVIDER
|
|
value: Other
|
|
- name: RCLONE_CONFIG_DEST_ENV_AUTH
|
|
value: false
|
|
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: ACCESS_KEY_ID
|
|
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: ACCESS_SECRET_KEY
|
|
- name: RCLONE_CONFIG_DEST_REGION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: ACCESS_REGION
|
|
- name: RCLONE_CONFIG_DEST_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: garage-postgres-backups-secret
|
|
key: DEST_ENDPOINT
|
|
- name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
|
|
value: true
|