From d19eb2152963a0254ff1771187b2aa6d82d1d256 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?M=C3=A1rcio=20Fernandes?= <marcio.fernandes@outlook.pt>
Date: Mon, 30 Mar 2026 23:46:41 +0000
Subject: [PATCH] offsite backup fix packages wrong path, set max offsite size
 to 5Gb, reset borg repo

---
 deploy/backups/cronjobs/backup-borg-offsite.yaml |  4 ++--
 deploy/ops/bork-backup-sidekick/pod.yaml         | 14 ++++++++------
 2 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/deploy/backups/cronjobs/backup-borg-offsite.yaml b/deploy/backups/cronjobs/backup-borg-offsite.yaml
index 30b89bb..0259e9c 100644
--- a/deploy/backups/cronjobs/backup-borg-offsite.yaml
+++ b/deploy/backups/cronjobs/backup-borg-offsite.yaml
@@ -82,7 +82,7 @@ spec:
                   value: ssh -p 2222 -o StrictHostKeyChecking=no -o LogLevel=ERROR
 
                 - name: REPO_SYNC_MAX_SIZE
-                  value: "21474836480" # 20GB
+                  value: "5368709120" # 5GB
 
                 - name: MODE
                   value: SHELL
@@ -99,7 +99,7 @@ spec:
                 # done
                 
                 borg create ${BORG_REPO}::postgresql-export-$(date +%Y%m%d%H%M%S) /data/postgresql-export
-                borg create ${BORG_REPO}::gitea-data-$(date +%Y%m%d%H%M%S) /data/gitea-data --exclude /data/packages --exclude /data/tmp
+                borg create ${BORG_REPO}::gitea-data-$(date +%Y%m%d%H%M%S) /data/gitea-data --exclude /data/gitea-data/packages --exclude /data/gitea-data/tmp
 
                 #cleanup
                 borg prune -v --list --keep-daily=10 --keep-weekly=7 --keep-monthly=-1 ${BORG_REPO} --glob-archives='gitea-data*'
diff --git a/deploy/ops/bork-backup-sidekick/pod.yaml b/deploy/ops/bork-backup-sidekick/pod.yaml
index d8fed43..7ed83ad 100644
--- a/deploy/ops/bork-backup-sidekick/pod.yaml
+++ b/deploy/ops/bork-backup-sidekick/pod.yaml
@@ -5,6 +5,8 @@ metadata:
   namespace: git-limbosolutions-com
   labels:
     app: borg-backup-sidekick
+    dbAccess: "true"
+    backups.infra.limbosolutions.com/ssh: "true"
 spec:
   containers:
       - name: borg-backup-sidekick
@@ -21,14 +23,14 @@ spec:
           - name: BORG_REPO
             valueFrom:
               secretKeyRef:
-                name: gitea-backup-secret
-                key: borg_repo
+                name: gitea-backup
+                key: BORG_REPO
 
           - name: BORG_PASSPHRASE
             valueFrom:
               secretKeyRef:
-                name: gitea-backup-secret
-                key: borg_passphrase
+                name: gitea-backup
+                key: BORG_PASSPHRASE
 
           - name: BORG_RSH
             value: ssh -p 2222 -o StrictHostKeyChecking=no -o LogLevel=ERROR
@@ -47,12 +49,12 @@ spec:
         
         - name: gitea-backup-secrets
           mountPath: /root/.ssh/id_rsa
-          subPath: ssh_id_rsa
+          subPath: SSH_ID_RSA
           readOnly: true
 
         - name: gitea-backup-secrets
           mountPath: /app/borg/key
-          subPath: borg_key
+          subPath: BORG_KEY
   volumes:
     - name: gitea-backup-secrets
       secret: