backups added resources limits, set offsite backup size limit to 15GB

cd: enable cron job, set helm chart to version 12.4.0
rename dev-scripts to ops-scripts
2025-12-04 01:16:24 +00:00 · 2025-11-29 14:19:57 +00:00 · 2025-11-29 14:12:29 +00:00 · 2025-11-29 12:53:23 +00:00 · 2025-11-29 12:50:57 +00:00 · 2025-11-29 12:48:10 +00:00
26 changed files with 932 additions and 90 deletions
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -0,0 +1,34 @@
+// For format details, see https://aka.ms/devcontainer.json. For config options, see the
+// README at: https://github.com/devcontainers/templates/tree/main/src/ubuntu
+{
+	"name": "git-limbosolutions-com-dev",
+	"image": "git.limbosolutions.com/mylimbo/devcontainers/devops:latest",
+	"runArgs": ["--hostname=git-limbosolutions-com-dev-container"],
+	"remoteUser": "vscode",
+	"mounts": [
+		"source=${localWorkspaceFolder}/.kube,target=/home/vscode/.kube,type=bind",
+		"source=${localEnv:HOME}/.gitconfig,target=/home/vscode/.gitconfig,type=bind",
+		"source=${localEnv:HOME}/.ssh,target=/home/vscode/.ssh,type=bind"
+	],
+	"customizations": {
+		"vscode": {
+			"extensions": [
+				"ms-kubernetes-tools.vscode-kubernetes-tools",
+				"redhat.ansible",
+				"mtxr.sqltools-driver-mysql",
+				"stateful.runme",
+				"yzhang.markdown-all-in-one",
+				"davidanson.vscode-markdownlint",
+				"eamodio.gitlens",
+				"m4ns0ur.base64",
+				"rogalmic.bash-debug",
+				"streetsidesoftware.code-spell-checker",
+				"ms-azuretools.vscode-containers",
+				"eamodio.gitlens",
+				"shd101wyy.markdown-preview-enhanced",
+				"bierner.markdown-preview-github-styles"
+
+			]
+		}
+	}
+}
--- a/.gitea/workflows/app-continous-deploy.yaml
+++ b/.gitea/workflows/app-continous-deploy.yaml
@@ -0,0 +1,93 @@
+on:
+  schedule:
+    - cron: '0 9 * * 0' # every sunday 9 am
+  push:
+    branches:
+      - main
+  pull_request:
+      branches:
+      - main
+jobs:
+  continuous-deploy:
+    runs-on: ubuntu-latest
+    container:
+      image: git.limbosolutions.com/kb/gitea/act:latest-network-stack
+    env:
+      GITHUB_TEMP: ${{ runner.temp }} # fix missing GITHUB_TEMP on gitea
+    steps:
+
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: limbo public actions
+        env: 
+          WORKSPACE: "${{ gitea.workspace }}"
+        run: |
+          curl -fsSL https://git.limbosolutions.com/kb/gitea/raw/branch/main/cloud-scripts/setup-limbo-actions.sh | bash 2>&1
+
+
+      # limbo custom actions required https://git.limbosolutions.com/kb/gitea/raw/branch/main
+      - name: Configure kubectl config
+        uses: ./.gitea/limbo_actions/kubectl-setup
+        with:
+          kube_server: ${{ secrets.HOSTING_KUBE_SERVER }}
+          kube_ca_base64: ${{ secrets.HOSTING_KUBE_CA_BASE64 }}
+          kube_token: ${{ secrets.HOSTING_KUBE_TOKEN }}
+
+      - name: Deploy
+        shell: bash
+        env:
+          # cron jobs env
+          CRONJOBS_BACKUPS_SECRETS_PBS_REPOSITORY: ${{ secrets.CRONJOBS_BACKUPS_SECRETS_PBS_REPOSITORY }}
+          CRONJOBS_BACKUPS_SECRETS_PBS_PASSWORD: ${{ secrets.CRONJOBS_BACKUPS_SECRETS_PBS_PASSWORD }}
+          CRONJOBS_BACKUPS_SECRETS_PBS_FINGERPRINT: ${{ secrets.CRONJOBS_BACKUPS_SECRETS_PBS_FINGERPRINT }}
+          CRONJOBS_BACKUPS_SECRETS_BORG_REPO: ${{ secrets.CRONJOBS_BACKUPS_SECRETS_BORG_REPO }}
+          CRONJOBS_BACKUPS_SECRETS_BORG_PASSPHRASE: ${{ secrets.CRONJOBS_BACKUPS_SECRETS_BORG_PASSPHRASE }}
+          CRONJOBS_BACKUPS_SECRETS_OFFSITE_TARGET_FOLDER: ${{ secrets.CRONJOBS_BACKUPS_SECRETS_OFFSITE_TARGET_FOLDER }}
+          CRONJOBS_BACKUPS_SECRETS_ID_RSA: ${{ secrets.CRONJOBS_BACKUPS_SECRETS_ID_RSA }}
+          CRONJOBS_BACKUPS_SECRETS_BORG_KEY: ${{ secrets.CRONJOBS_BACKUPS_SECRETS_BORG_KEY }}
+
+          # helm chart values
+          APP_HELM_VALUE_VALKEY_GLOBAL_PASSWORD: ${{ secrets.APP_HELM_VALUE_VALKEY_GLOBAL_PASSWORD }}
+          APP_HELM_VALUE_POSTGRESQL_AUTH_POSTGRESPASSWORD: ${{ secrets.APP_HELM_VALUE_POSTGRESQL_AUTH_POSTGRESPASSWORD }}
+          APP_HELM_VALUE_POSTGRESQL_AUTH_PASSWORD: ${{ secrets.APP_HELM_VALUE_POSTGRESQL_AUTH_PASSWORD }}
+          APP_HELM_VALUE_POSTGRESQL_AUTH_DATABASE: ${{ secrets.APP_HELM_VALUE_POSTGRESQL_AUTH_DATABASE }}
+          APP_HELM_VALUE_POSTGRESQL_AUTH_USERNAME: ${{ secrets.APP_HELM_VALUE_POSTGRESQL_AUTH_USERNAME }}
+          APP_HELM_VALUE_GITEA_ADMIN_USERNAME: ${{ secrets.APP_HELM_VALUE_GITEA_ADMIN_USERNAME }}
+          APP_HELM_VALUE_GITEA_ADMIN_PASSWORD: ${{ secrets.APP_HELM_VALUE_GITEA_ADMIN_PASSWORD }}
+          APP_HELM_VALUE_GITEA_ADMIN_EMAIL: ${{ secrets.APP_HELM_VALUE_GITEA_ADMIN_EMAIL }}
+          APP_HELM_VALUE_GITEA_CONFIG_OAUTH2_JWT_SECRET: ${{ secrets.APP_HELM_VALUE_GITEA_CONFIG_OAUTH2_JWT_SECRET }}
+          APP_HELM_VALUE_GITEA_CONFIG_SERVER_LFS_JWT_SECRET: ${{ secrets.APP_HELM_VALUE_GITEA_CONFIG_SERVER_LFS_JWT_SECRET }}
+          APP_HELM_VALUE_GITEA_CONFIG_SECURITY_SECRET_KEY: ${{ secrets.APP_HELM_VALUE_GITEA_CONFIG_SECURITY_SECRET_KEY }}
+          APP_HELM_VALUE_GITEA_CONFIG_SECURITY_REVERSE_PROXY_TRUSTED_PROXIES: ${{ secrets.APP_HELM_VALUE_GITEA_CONFIG_SECURITY_REVERSE_PROXY_TRUSTED_PROXIES }}
+          APP_HELM_VALUE_GITEA_CONFIG_SECURITY_INTERNAL_TOKEN: ${{ secrets.APP_HELM_VALUE_GITEA_CONFIG_SECURITY_INTERNAL_TOKEN }}
+          APP_HELM_VALUE_GITEA_CONFIG_SECURITY_PASSWORD_HASH_ALGO: ${{ secrets.APP_HELM_VALUE_GITEA_CONFIG_SECURITY_PASSWORD_HASH_ALGO }}
+          APP_HELM_VALUE_GITEA_CONFIG_SERVICE_OAUTH2_JWT_SECRET: ${{ secrets.APP_HELM_VALUE_GITEA_CONFIG_SERVICE_OAUTH2_JWT_SECRET }}
+
+        run: |
+          set -euo pipefail
+
+          # ensure cleanup always runs
+          trap 'rm -f \
+                    deploy/app/cronjobs/backups/.env.d/secrets \
+                    deploy/app/cronjobs/backups/.env.d/id_rsa \
+                    deploy/app/cronjobs/backups/.env.d/borg_key' EXIT
+
+          # setup env for cronjobs backups
+          echo "PBS_REPOSITORY=${CRONJOBS_BACKUPS_SECRETS_PBS_REPOSITORY}" >> deploy/app/cronjobs/backups/.env.d/secrets
+          echo "PBS_PASSWORD=${CRONJOBS_BACKUPS_SECRETS_PBS_PASSWORD}" >> deploy/app/cronjobs/backups/.env.d/secrets
+          echo "PBS_FINGERPRINT=${CRONJOBS_BACKUPS_SECRETS_PBS_FINGERPRINT}" >> deploy/app/cronjobs/backups/.env.d/secrets
+          echo "BORG_REPO=${CRONJOBS_BACKUPS_SECRETS_BORG_REPO}" >> deploy/app/cronjobs/backups/.env.d/secrets
+          echo "BORG_PASSPHRASE=${CRONJOBS_BACKUPS_SECRETS_BORG_PASSPHRASE}" >> deploy/app/cronjobs/backups/.env.d/secrets
+          echo "OFFSITE_TARGET_FOLDER=${CRONJOBS_BACKUPS_SECRETS_OFFSITE_TARGET_FOLDER}" >> deploy/app/cronjobs/backups/.env.d/secrets
+          
+          echo "${CRONJOBS_BACKUPS_SECRETS_ID_RSA}" >> deploy/app/cronjobs/backups/.env.d/id_rsa
+          echo "${CRONJOBS_BACKUPS_SECRETS_BORG_KEY}" >> deploy/app/cronjobs/backups/.env.d/borg_key
+          
+          # enforce security
+          chmod 600 deploy/app/cronjobs/backups/.env.d/secrets
+          chmod 600 deploy/app/cronjobs/backups/.env.d/id_rsa
+          chmod 600 deploy/app/cronjobs/backups/.env.d/borg_key
+
+          # invoke deploy script
+          ops-scripts/apply-app.sh
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,5 @@
+tmp
 **.env
-_volumes
-_volumes
-.vscode
+**.private.**
+**.local.**
+.kube/**
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -0,0 +1,5 @@
+{
+    "cSpell.words": [
+        "valkey"
+    ]
+}
--- a/README.md
+++ b/README.md
@@ -1,10 +1,44 @@
-
 # git.limbosolutions.com

-* Arquitectura : armv7 
-* docker 
-[compose file](docker/docker-compose.armv7.yaml)
+Welcome to public repository of my [Git Server](https://git.limbosolutions.com)

-## Backup and Restore Strategy
-Duplicati
-(more info required)
+Using [gitea](https://git.limbosolutions.com/kb/gitea) as git server.
+
+- [Deploy](#deploy)
+  - [App](#app)
+  - [Continuous Deploy](#continuous-deploy)
+  - [Infra](#infra)
+- [Backups](#backups)
+
+## Deploy
+
+### App
+
+**Environment files:**
+
+- ./deploy/app/cronjobs/backups/.env.d/secrets [Example](./deploy/app/cronjobs/backups/.env.d/secrets.example)
+- ./deploy/app/cronjobs/backups/.env.d/borg_key [Example](./deploy/app/cronjobs/backups/.env.d/borg_key.example)
+- ./deploy/app/cronjobs/backups/.env.d/id_rsa [Example](./deploy/app/cronjobs/backups/.env.d/id_rsa.example)
+- ./deploy/helm/.env [Example](./deploy/helm/.env.example)
+
+```bash
+./ops-scripts/apply-app.sh
+```
+
+- [kustomization](/deploy/app/kustomization.yaml)
+
+### Continuous Deploy
+
+Executes [App Deploy](#app) using [Gitea workflow](./.gitea/workflows/app-deploy.yaml).
+
+### Infra
+
+```bash
+./ops-scripts/apply-infra.sh
+```
+
+- [kustomization](/deploy/infra/kustomization.yaml)
+  
+## Backups
+
+for more information [check readme](./docs/backups.md).
--- a/deploy/app/cronjobs/backups/.env.d/.gitignore
+++ b/deploy/app/cronjobs/backups/.env.d/.gitignore
@@ -0,0 +1,3 @@
+**
+!.gitignore
+!*.example
--- a/deploy/app/cronjobs/backups/.env.d/borg_key.example
+++ b/deploy/app/cronjobs/backups/.env.d/borg_key.example
@@ -0,0 +1 @@
+BORG_KEY an valid borg key
--- a/deploy/app/cronjobs/backups/.env.d/id_rsa.example
+++ b/deploy/app/cronjobs/backups/.env.d/id_rsa.example
@@ -0,0 +1,3 @@
+-----BEGIN OPENSSH PRIVATE KEY-----
+AND VALID PRIVATE SSH KEY WITH ACCESS TO SSH SERVER  
+-----END OPENSSH PRIVATE KEY-----
--- a/deploy/app/cronjobs/backups/.env.d/secrets.example
+++ b/deploy/app/cronjobs/backups/.env.d/secrets.example
@@ -0,0 +1,7 @@
+PBS_REPOSITORY="pbs repository"
+PBS_PASSWORD="pbs access passwordd"
+PBS_FINGERPRINT="00:00:00:00:00" # the pbs finger print
+BORG_REPO="ssh://user@reposerver/path" # required by offsite babckup
+BORG_PASSPHRASE="borg passphare" # required by offsite babckup
+OFFSITE_TARGET_FOLDER="test:target_path" # follow rclone naming convension
+
--- a/deploy/app/cronjobs/backups/backup-borg-offsite-cronjob.yaml
+++ b/deploy/app/cronjobs/backups/backup-borg-offsite-cronjob.yaml
@@ -0,0 +1,163 @@
+
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: backup-borg-offsite
+  namespace: git-limbosolutions-com
+spec:
+  schedule: "0 16 * * 0" #every sunday at 4pm
+  jobTemplate:
+    spec:
+      backoffLimit: 1
+      template:
+        metadata:
+          labels:
+            app: offsite-backup
+        spec:
+          restartPolicy: Never
+          initContainers:
+            - name: postgres-export
+              resources:
+                limits:
+                  memory: "512Mi"
+                  cpu: "500m"
+                requests:
+                  memory: "256Mi"
+                  cpu: "250m"
+              image: postgres:latest
+              command: ["sh", "-c"]
+              args:
+                - |
+                  set -e
+                  . /root/.gitea-inline-config/database
+                  export PGPASSWORD=$PASSWD
+                  pg_dump -h gitea-postgresql.git-limbosolutions-com.svc.cluster.local -U $USER -d $NAME > /data/postgresql-export/db_backup.sql
+  
+              volumeMounts:
+                
+              - name: backup-var-data
+                mountPath: /data/postgresql-export
+                subPath: postgresql-export
+
+              - name: gitea-inline-config
+                mountPath: /root/.gitea-inline-config
+                readOnly: true
+
+
+     
+          containers:
+            - name: borg-client
+              image: git.limbosolutions.com/kb/borg-backup:latest
+              imagePullPolicy: Always
+              resources:
+                limits:
+                  memory: "512Mi"
+                  cpu: "500m"
+                requests:
+                  memory: "256Mi"
+                  cpu: "250m"
+              env:
+                - name: BORG_REPO
+                  valueFrom:
+                    secretKeyRef:
+                      name: gitea-backup
+                      key: BORG_REPO
+
+                - name: BORG_PASSPHRASE
+                  valueFrom:
+                    secretKeyRef:
+                      name: gitea-backup
+                      key: BORG_PASSPHRASE
+
+          
+                - name: OFFSITE_TARGET_FOLDER
+                  valueFrom:
+                    secretKeyRef:
+                      name: gitea-backup
+                      key: OFFSITE_TARGET_FOLDER
+
+
+                - name: BORG_RSH
+                  value: ssh -p 2222 -o StrictHostKeyChecking=no -o LogLevel=ERROR
+
+                - name: REPO_SYNC_MAX_SIZE
+                  value: "16106127360" # 15GB
+
+                - name: MODE
+                  value: SHELL
+           
+
+              args:
+              - |
+                set -e
+                
+                SCRIPT_START_TIME=$(date +%s)
+
+                # while true; do
+                #   sleep 5
+                # done
+                
+                borg create ${BORG_REPO}::postgresql-export-$(date +%Y%m%d%H%M%S) /data/postgresql-export
+                borg create ${BORG_REPO}::gitea-data-$(date +%Y%m%d%H%M%S) /data/gitea-data
+
+                #cleanup
+                borg prune -v --list --keep-daily=10 --keep-weekly=7 --keep-monthly=-1 ${BORG_REPO} --glob-archives='gitea-data*'
+                borg prune -v --list --keep-daily=10 --keep-weekly=7 --keep-monthly=-1 ${BORG_REPO} --glob-archives='postgresql-export*'
+                borg compact ${BORG_REPO} 
+
+                # check repo size
+                REPO_SIZE_IN_BYTES=$(remote-get-folder-size)
+                echo "Repository size: $((REPO_SIZE_IN_BYTES / 1024 / 1024))MB"
+                
+                if [ $REPO_SIZE_IN_BYTES -gt $REPO_SYNC_MAX_SIZE ]; then \
+                  echo "ERROR: Repository size $((REPO_SIZE_IN_BYTES / 1024 / 1024))MB exceeds $((REPO_SYNC_MAX_SIZE / 1024 / 1024))MB";
+                  exit 1;
+                else 
+                  # Repository size is within limits for offsite sync
+                  # ssh to backup server and enforce rclone to onedrive
+                  remote-connect "rclone sync $SSH_FOLDER $OFFSITE_TARGET_FOLDER --stats=0" && \
+                  echo "INFO: Finished Backup of git.limbosolutions.com (offsite) ($((SCRIPT_DURATION / 60 / 60)):$((SCRIPT_DURATION / 60)):$((SCRIPT_DURATION % 60))) "
+                fi
+
+                #outputs info
+                borg info ${BORG_REPO}
+                #borg info ${BORG_REPO} --json
+
+              volumeMounts:
+                - name: gitea-data
+                  mountPath: /data/gitea-data
+
+                - name: backup-var-data
+                  mountPath: /data/postgresql-export
+                  subPath: postgresql-export
+              
+                - name: gitea-backup-secrets
+                  mountPath: /root/.ssh/id_rsa
+                  subPath: SSH_ID_RSA
+                  readOnly: true
+
+                - name: gitea-backup-secrets
+                  mountPath: /app/borg/key
+                  subPath: BORG_KEY
+
+          volumes:
+
+            - name: gitea-data
+              persistentVolumeClaim:
+                claimName: gitea-shared-storage
+
+            - name: gitea-inline-config
+              secret:
+                secretName: gitea-inline-config
+
+            - name: gitea-backup-secrets
+              secret:
+                secretName: gitea-backup
+                defaultMode: 0600
+
+            - name: backup-var-data
+              emptyDir: {}
+
+
+
+
--- a/deploy/app/cronjobs/backups/backup-pbs-cronjob.yaml
+++ b/deploy/app/cronjobs/backups/backup-pbs-cronjob.yaml
@@ -0,0 +1,123 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: backup-pbs
+  namespace: git-limbosolutions-com
+spec:
+  schedule: "0 1 * * *"
+  jobTemplate:
+    spec:
+      backoffLimit: 1
+      template:
+        metadata:
+          labels:
+            app: pbs-backup
+        spec:
+          restartPolicy: Never
+          initContainers:
+            - name: postgres-export
+              image: postgres:latest
+              resources:
+                limits:
+                  memory: "512Mi"
+                  cpu: "500m"
+                requests:
+                  memory: "256Mi"
+                  cpu: "250m"
+              command: ["sh", "-c"]
+              args:
+                - |
+                  #echo "INFO: Starting export"
+                  . /root/.gitea-inline-config/database
+                  export PGPASSWORD=$PASSWD
+                  #echo "INFO: Exporting database"
+                  pg_dump -h gitea-postgresql.git-limbosolutions-com.svc.cluster.local -U $USER -d $NAME > /data/postgresql-export/db_backup.sql
+                  if [ $? -ne 0 ]; then
+                    echo "ERROR: Exporting database failed"
+                    exit 1
+                  fi 
+                  #echo "INFO: Exporting database finished"
+
+              volumeMounts:
+
+              - name: backup-run-data
+                mountPath: /data/postgresql-export
+                subPath: postgresql-export
+
+              - name: gitea-inline-config
+                mountPath: /root/.gitea-inline-config
+                readOnly: true
+
+          containers:
+            - name: gitea-pbs-client
+              image: git.limbosolutions.com/kb/pbsclient
+              imagePullPolicy: Always
+              resources:
+                limits:
+                  memory: "512Mi"
+                  cpu: "500m"
+                requests:
+                  memory: "256Mi"
+                  cpu: "250m"
+              env:  
+                - name: MODE
+                  value: shell
+                - name: PBS_REPOSITORY
+                  valueFrom:
+                    secretKeyRef:
+                      name: gitea-backup
+                      key:  PBS_REPOSITORY
+                - name: PBS_PASSWORD
+                  valueFrom:
+                    secretKeyRef:
+                      name: gitea-backup
+                      key: PBS_PASSWORD
+                - name: PBS_FINGERPRINT
+                  valueFrom:
+                    secretKeyRef:
+                      name: gitea-backup
+                      key: PBS_FINGERPRINT
+
+              command: ["bash", "-c"]
+              args:
+                - |
+                  set -e
+                  #  while true; do
+                  #    sleep 1s
+                  #  done
+                  SCRIPT_START_TIME=$(date +%s)
+                  proxmox-backup-client backup gitea-data.pxar:/data/gitea-data postgresql-data.pxar:/data/postgresql-data postgresql-export.pxar:/data/postgresql-export --include-dev /data/postgresql-data --include-dev /data/postgresql-export --include-dev /data/gitea-data --backup-id "gitea-full" -ns git.limbosolutions.com
+                  SCRIPT_DURATION=$(($(date +%s) - SCRIPT_START_TIME))
+                  echo "INFO: Finished Backup of git.limbosolutions.com ($((SCRIPT_DURATION / 60 / 60)):$((SCRIPT_DURATION / 60)):$((SCRIPT_DURATION % 60))) "
+
+              volumeMounts:
+              - name: gitea-shared-storage
+                mountPath: /data/gitea-data
+
+              - name: db-postgresql-data
+                mountPath: /data/postgresql-data
+              
+              - name: backup-run-data
+                mountPath: /data/postgresql-export
+                subPath: postgresql-export
+
+              - name: backup-run-data
+                mountPath: /tmp
+                subPath: tmp
+        
+
+          volumes:
+            - name: gitea-shared-storage
+              persistentVolumeClaim:
+                claimName: gitea-shared-storage
+
+            - name: db-postgresql-data
+              persistentVolumeClaim:
+                claimName: data-gitea-postgresql-0
+          
+            - name: backup-run-data
+              emptyDir: {}
+
+            - name: gitea-inline-config
+              secret:
+                secretName: gitea-inline-config
--- a/deploy/app/kustomization.yaml
+++ b/deploy/app/kustomization.yaml
@@ -0,0 +1,17 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - cronjobs/backups/backup-borg-offsite-cronjob.yaml
+  - cronjobs/backups/backup-pbs-cronjob.yaml
+
+secretGenerator:
+- name: gitea-backup
+  namespace: git-limbosolutions-com
+  envs:
+    - cronjobs/backups/.env.d/secrets
+  files:
+    - BORG_KEY=cronjobs/backups/.env.d/borg_key
+    - SSH_ID_RSA=cronjobs/backups/.env.d/id_rsa
+    
+generatorOptions:
+  disableNameSuffixHash: true
--- a/deploy/helm/.env.example
+++ b/deploy/helm/.env.example
@@ -0,0 +1,15 @@
+APP_HELM_VALUE_VALKEY_GLOBAL_PASSWORD="????"
+APP_HELM_VALUE_POSTGRESQL_AUTH_POSTGRESPASSWORD="????"
+APP_HELM_VALUE_POSTGRESQL_AUTH_PASSWORD="????"
+APP_HELM_VALUE_POSTGRESQL_AUTH_DATABASE="????"
+APP_HELM_VALUE_POSTGRESQL_AUTH_USERNAME="????"
+APP_HELM_VALUE_GITEA_ADMIN_USERNAME="????"
+APP_HELM_VALUE_GITEA_ADMIN_PASSWORD="????"
+APP_HELM_VALUE_GITEA_ADMIN_EMAIL="????"
+APP_HELM_VALUE_GITEA_CONFIG_OAUTH2_JWT_SECRET="????"
+APP_HELM_VALUE_GITEA_CONFIG_SERVER_LFS_JWT_SECRET="????"
+APP_HELM_VALUE_GITEA_CONFIG_SECURITY_SECRET_KEY="????"
+APP_HELM_VALUE_GITEA_CONFIG_SECURITY_REVERSE_PROXY_TRUSTED_PROXIES="????"
+APP_HELM_VALUE_GITEA_CONFIG_SECURITY_INTERNAL_TOKEN="????"
+APP_HELM_VALUE_GITEA_CONFIG_SECURITY_PASSWORD_HASH_ALGO="????"
+APP_HELM_VALUE_GITEA_CONFIG_SERVICE_OAUTH2_JWT_SECRET="????"
--- a/deploy/helm/values.yaml
+++ b/deploy/helm/values.yaml
@@ -0,0 +1,149 @@
+image:
+  registry: ""
+  repository: gitea/gitea
+  pullPolicy: Always
+  tag: "1"
+
+cache:
+  enabled: false
+
+valkey-cluster:
+  enabled: false
+
+valkey:
+  enabled: true
+  architecture: standalone
+  global:
+    valkey:
+      password: "???"
+  master:
+    count: 1
+    service:
+      ports:
+        valkey: 6379
+
+postgresql:
+  enabled: true
+  image:
+    registry: ""
+    repository: bitnami/postgresql
+    tag: 16
+    imagePullPolicy: IfNotPresent
+  global:
+    postgresql:
+      auth:
+        postgresPassword: "???"
+        password: "???"
+        database: "???"
+        username: "???"
+      service:
+        ports:
+          postgresql: 5432
+  primary:
+    persistence:
+      size: 10Gi
+  metrics:
+    enabled: true
+    collectors:
+      wal: false
+ 
+postgresql-ha:
+  enabled: false
+
+persistence:
+  enabled: true
+service:
+  ssh:
+      enabled: true
+      port: 2222
+      annotations:
+        metallb.universe.tf/allow-shared-ip: test
+  http:
+    clusterIP: ""   # empty string → Kubernetes assigns a routable ClusterIP
+    type: ClusterIP
+    port: 3000
+gitea:
+  admin:
+    username: "???"
+    password: "???"
+    email: "???"
+  config:
+    oauth2:
+      JWT_SECRET: "???"
+    actions:
+      ENABLED: true
+    database:
+      DB_TYPE: postgres
+    indexer:
+      ISSUE_INDEXER_TYPE: bleve
+      REPO_INDEXER_ENABLED: true
+    picture:
+      AVATAR_UPLOAD_PATH: /data/avatars
+    server:
+      DOMAIN: git.limbosolutions.com
+      SSH_DOMAIN: git.limbosolutions.com
+      ROOT_URL: https://git.limbosolutions.com
+      DISABLE_SSH: false
+      SSH_PORT: 2222
+      SSH_LISTEN_PORT: 2222
+      LFS_START_SERVER: true
+      START_SSH_SERVER: true
+      LFS_PATH: /data/git/lfs
+      LFS_JWT_SECRET: "???"
+      OFFLINE_MODE: false
+      #MFF 03/08/2024
+      REPO_INDEXER_ENABLED: true
+      REPO_INDEXER_PATH: indexers/repos.bleve
+      MAX_FILE_SIZE: 1048576
+      REPO_INDEXER_INCLUDE:
+      REPO_INDEXER_EXCLUDE: resources/bin/**
+      ####
+    
+    service:
+      DISABLE_REGISTRATION: true
+      REQUIRE_SIGNIN_VIEW: false
+      REGISTER_EMAIL_CONFIRM: false
+      ENABLE_NOTIFY_MAIL: false
+      ALLOW_ONLY_EXTERNAL_REGISTRATION: false
+      ENABLE_CAPTCHA: true
+      DEFAULT_KEEP_EMAIL_PRIVATE : true
+      DEFAULT_ALLOW_CREATE_ORGANIZATION: true
+      DEFAULT_ENABLE_TIMETRACKING:  true
+      NO_REPLY_ADDRESS: noreply.localhost
+      oauth2:
+          JWT_SECRET: "???"
+    mailer:
+      ENABLED: false
+
+    openid:
+      ENABLE_OPENID_SIGNIN: false
+      ENABLE_OPENID_SIGNUP: false
+    
+
+    security:
+      INSTALL_LOCK: true
+      SECRET_KEY: "???"
+      REVERSE_PROXY_LIMIT: 1
+      REVERSE_PROXY_TRUSTED_PROXIES: "???"
+      INTERNAL_TOKEN: "???"
+      PASSWORD_HASH_ALGO: "???"
+
+ingress:
+  enabled: true
+  className: traefik
+  annotations:
+    kubernetes.io/ingress.class: traefik
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure, public-https
+  hosts:
+    - host: git.limbosolutions.com
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+    - secretName: limbosolutions-com-tls
+      hosts:
+       - "git.limbosolutions.com"
+
+
+
--- a/deploy/infra/cd-service-account-rbac.yaml
+++ b/deploy/infra/cd-service-account-rbac.yaml
@@ -0,0 +1,43 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  namespace: git-limbosolutions-com
+  name: continuous-deploy
+rules:
+- apiGroups: [""]
+  resources: ["pods", "services", "secrets", "configmaps", "persistentvolumeclaims", "endpoints", "serviceaccounts"]
+  verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]
+
+- apiGroups: ["apps"]
+  resources: ["deployments", "statefulsets"]
+  verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]
+
+- apiGroups: ["batch"]
+  resources: ["cronjobs", "jobs"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+
+- apiGroups: ["networking.k8s.io"]
+  resources: ["networkpolicies", "ingresses"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+
+- apiGroups: ["policy"]
+  resources: ["poddisruptionbudgets"]
+  verbs: ["get", "list", "watch", "update", "patch"]
+
+
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: continuous-deploy
+  namespace:  git-limbosolutions-com
+subjects:
+- kind: ServiceAccount
+  name: continuous-deploy
+  namespace: git-limbosolutions-com
+roleRef:
+  kind: Role
+  name: continuous-deploy
+  apiGroup: rbac.authorization.k8s.io
+
--- a/deploy/infra/cd-service-account-token.yaml
+++ b/deploy/infra/cd-service-account-token.yaml
@@ -0,0 +1,8 @@
+
+apiVersion: v1
+kind: Secret
+metadata:
+  name: continuous-deploy
+  annotations:
+    kubernetes.io/service-account.name: continuous-deploy
+type: kubernetes.io/service-account-token
--- a/deploy/infra/cd-service-account.yaml
+++ b/deploy/infra/cd-service-account.yaml
@@ -0,0 +1,6 @@
+
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: continuous-deploy
+  namespace: git-limbosolutions-com
--- a/deploy/infra/kustomization.yaml
+++ b/deploy/infra/kustomization.yaml
@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - cd-service-account.yaml
+  - cd-service-account-token.yaml
+  - cd-service-account-rbac.yaml
+
--- a/deploy/infra/namespace.yaml
+++ b/deploy/infra/namespace.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: git-limbosolutions-com
+  labels:
+    name: git-limbosolutions-com
--- a/deploy/ops/bork-backup-sidekick/pod.yaml
+++ b/deploy/ops/bork-backup-sidekick/pod.yaml
@@ -0,0 +1,61 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: borg-backup-sidekick
+  namespace: git-limbosolutions-com
+  labels:
+    app: borg-backup-sidekick
+spec:
+  containers:
+      - name: borg-backup-sidekick
+        image: git.limbosolutions.com/kb/borg-backup:latest
+        imagePullPolicy: Always
+        resources:
+          limits:
+            memory: "512Mi"
+            cpu: "500m"
+          requests:
+            memory: "256Mi"
+            cpu: "250m"
+        env:
+          - name: BORG_REPO
+            valueFrom:
+              secretKeyRef:
+                name: gitea-backup-secret
+                key: borg_repo
+
+          - name: BORG_PASSPHRASE
+            valueFrom:
+              secretKeyRef:
+                name: gitea-backup-secret
+                key: borg_passphrase
+
+          - name: BORG_RSH
+            value: ssh -p 2222 -o StrictHostKeyChecking=no -o LogLevel=ERROR
+
+          - name: borg_key_file
+            value: /root/.borg/key
+
+        command: ["sh", "-c"]
+        args:
+        - |
+          while true; do
+             sleep 1s
+          done
+
+        volumeMounts:
+        
+        - name: gitea-backup-secrets
+          mountPath: /root/.ssh/id_rsa
+          subPath: ssh_id_rsa
+          readOnly: true
+
+        - name: gitea-backup-secrets
+          mountPath: /app/borg/key
+          subPath: borg_key
+  volumes:
+    - name: gitea-backup-secrets
+      secret:
+        secretName: gitea-backup
+        defaultMode: 0600
+
--- a/docker/README.md
+++ b/docker/README.md
@@ -1,9 +0,0 @@
-# compose file 
-## Requirements
-* [Docker Image](https://git.limbosolutions.com/marcio.fernandes/duplicati-utils/src/branch/main/docker/sqlclient.DockerFile)
-
-
-# old info
-## Backup
-/usr/bin/docker exec -u git -w /tmp/backups gitea bash -c "/app/gitea/gitea dump"
-
--- a/docker/docker-compose.armv7.yaml
+++ b/docker/docker-compose.armv7.yaml
@@ -1,71 +0,0 @@
-version: "3"
-services:
-  server:
-    image: kunde21/gitea-arm
-    container_name: gitea
-    environment:
-      - GITEA__database__DB_TYPE=mysql
-      - GITEA__database__HOST=db:3306
-      - GITEA__database__NAME=${GITEA_DB_NAME}
-      - GITEA__database__USER=${GITEA_DB_USER}
-      - GITEA__database__PASSWD=${GITEA_DB_PASSWORD}
-      - DISABLE_SSH=true
-    restart: unless-stopped
-    volumes:
-      - data:/data
-      - /etc/timezone:/etc/timezone:ro
-      - /etc/localtime:/etc/localtime:ro
-    #ports:
-    #- "3000:3000" web ui
-    #- "22:22" ssh
-    depends_on:
-      - db
-    networks:
-      macvlan:
-         ipv4_address: ${GITEA_MACVLAN_IP}
-      gitea_network:
-  db:
-    image: tobi312/rpi-mariadb:10.5-ubuntu
-    container_name: gitea_mariadb
-    restart: always
-    environment:
-      - MYSQL_ROOT_PASSWORD=${MARIADB_ROOT_PASSWORD}
-      - MYSQL_USER=${GITEA_DB_USER}
-      - MYSQL_PASSWORD=${GITEA_DB_PASSWORD}
-      - MYSQL_DATABASE=${GITEA_DB_NAME}
-    volumes:
-      - db:/var/lib/mysql
-      - /etc/timezone:/etc/timezone:ro
-      - /etc/localtime:/etc/localtime:ro
-    networks:
-      gitea_network:
-  duplicati:
-    container_name: gitea_duplicati
-    image: duplicati-sqlclient
-    environment:
-      - GITEA_DB_HOST=db
-      - GITEA_DB_NAME=${GITEA_DB_NAME}
-      - GITEA_DB_USER=${GITEA_DB_USER}
-      - GITEA_DB_PASSWORD=${GITEA_DB_PASSWORD}
-      - GITEA_DB_BACKUP_TARGETFOLDER=${GITEA_DB_BACKUP_TARGETFOLDER}
-    volumes:
-      - duplicati-data:/data
-      - duplicati-data:/git/duplicati-data:ro
-      - data:/git/data:ro
-      - db:/git/db:ro
-      - db-dumps:/git/db-dumps
-    ports:
-      - 8202:8200
-    restart: unless-stopped
-    networks:
-      gitea_network:
-volumes:
-  data:
-  db:
-  db-dumps:
-  duplicati-data:
-networks:
-  macvlan:
-    external: true
-    name: macvlan_pub_net
-  gitea_network:
--- a/docs/act-runner.md
+++ b/docs/act-runner.md
@@ -0,0 +1,63 @@
+# Git Action
+
+## runners
+
+## lxc container - proxmox
+
+Template : debian-12-turnkey-core_18.1-1_amd64.tar.gz
+
+- Unprivileged contrainer - Yes
+- Nesting -Yes
+
+```bash
+# setup new lxc container with docker
+
+apt update -y
+apt upgrade -y
+curl -fsSL https://get.docker.com -o get-docker.sh
+sh ./get-docker.sh
+```
+
+### act runner
+
+```bash
+nano setup-act-runners.sh
+```
+
+```bash
+#/bin/bash
+
+setup(){
+
+CONTAINER_NAME=${OWNER}_act_runner
+
+docker container stop $CONTAINER_NAME
+docker container rm $CONTAINER_NAME
+
+docker run \
+    --restart=unless-stopped \
+    -v ${CONTAINER_NAME}_data:/data \
+    -v /var/run/docker.sock:/var/run/docker.sock \
+    -e GITEA_INSTANCE_URL=${INSTANCE_URL} \
+    -e GITEA_RUNNER_REGISTRATION_TOKEN=${REGISTRATION_TOKEN} \
+    -e GITEA_RUNNER_NAME=${OWNER}_ubuntu_default \
+    --name ${CONTAINER_NAME} \
+    -d gitea/act_runner
+}
+
+INSTANCE_URL=https://git.limbosolutions.com
+OWNER=kb
+REGISTRATION_TOKEN=???
+setup
+
+
+OWNER=????
+REGISTRATION_TOKEN=???
+setup
+
+```
+
+```bash
+chmod +x setup-act-runners.sh
+./setup-act-runners.sh
+```
--- a/docs/backups.md
+++ b/docs/backups.md
@@ -0,0 +1,36 @@
+# borgbackup sidekick
+
+**Create borgbackup-sidekick pod:**
+
+```bash
+kubectl apply -f deploy/ops/borg-backup-sidekick/pod.yaml
+```
+
+**Remove borgbackup-sidekick pod:**
+
+```bash
+# delete the sidekick pod after use
+kubectl delete pod -l app=borg-backup-sidekick
+```
+
+```bash
+# attach to borgbackup-sidekick
+POD_NAME=$(kubectl get pod -l app=borg-backup-sidekick -n git-limbosolutions-com -o jsonpath='{.items[0].metadata.name}')
+kubectl exec -it ${POD_NAME}  -- bash
+```
+
+```bash
+# list borg repo
+POD_NAME=$(kubectl get pod -l app=borg-backup-sidekick -n git-limbosolutions-com -o jsonpath='{.items[0].metadata.name}')
+kubectl exec -it ${POD_NAME} -- bash -c "\
+borg list ${BORG_REPO} \
+"
+```
+
+```bash
+# get borg info
+POD_NAME=$(kubectl get pod -l app=borg-backup-sidekick -n git-limbosolutions-com -o jsonpath='{.items[0].metadata.name}')
+kubectl exec -it ${POD_NAME} -- bash -c "\
+borg info ${BORG_REPO}\
+"
+```
--- a/ops-scripts/apply-app.sh
+++ b/ops-scripts/apply-app.sh
@@ -0,0 +1,36 @@
+#/bin/bash
+kubectl kustomize deploy/app | kubectl apply -f -
+
+if [ -f "deploy/helm/.env" ]; then
+  # Export all variables from the file
+  echo "export variables from file helm/.env" 
+  set -a
+  . deploy/helm/.env
+  set +a
+fi
+
+
+if [ -n "${APP_HELM_VALUE_GITEA_ADMIN_USERNAME:-}" ]; then
+  echo "Executing helm deploy."
+
+    helm repo add gitea-charts https://dl.gitea.com/charts/
+    helm repo update
+    helm upgrade --install gitea gitea-charts/gitea --version 12.4.0 \
+    --values deploy/helm/values.yaml \
+    --set valkey.global.valkey.password=${APP_HELM_VALUE_VALKEY_GLOBAL_PASSWORD} \
+    --set postgresql.global.postgresql.auth.postgresPassword=${APP_HELM_VALUE_POSTGRESQL_AUTH_POSTGRESPASSWORD} \
+    --set postgresql.global.postgresql.auth.password=${APP_HELM_VALUE_POSTGRESQL_AUTH_PASSWORD} \
+    --set postgresql.global.postgresql.auth.database=${APP_HELM_VALUE_POSTGRESQL_AUTH_DATABASE} \
+    --set postgresql.global.postgresql.auth.username=${APP_HELM_VALUE_POSTGRESQL_AUTH_USERNAME} \
+    --set gitea.admin.username=${APP_HELM_VALUE_GITEA_ADMIN_USERNAME} \
+    --set gitea.admin.password=${APP_HELM_VALUE_GITEA_ADMIN_PASSWORD} \
+    --set gitea.admin.email=${APP_HELM_VALUE_GITEA_ADMIN_EMAIL} \
+    --set gitea.config.oauth2.JWT_SECRET=${APP_HELM_VALUE_GITEA_CONFIG_OAUTH2_JWT_SECRET} \
+    --set gitea.config.server.LFS_JWT_SECRET=${APP_HELM_VALUE_GITEA_CONFIG_SERVER_LFS_JWT_SECRET} \
+    --set gitea.config.security.SECRET_KEY=${APP_HELM_VALUE_GITEA_CONFIG_SECURITY_SECRET_KEY} \
+    --set gitea.config.security.REVERSE_PROXY_TRUSTED_PROXIES=${APP_HELM_VALUE_GITEA_CONFIG_SECURITY_REVERSE_PROXY_TRUSTED_PROXIES} \
+    --set gitea.config.security.INTERNAL_TOKEN=${APP_HELM_VALUE_GITEA_CONFIG_SECURITY_INTERNAL_TOKEN} \
+    --set gitea.config.security.PASSWORD_HASH_ALGO=${APP_HELM_VALUE_GITEA_CONFIG_SECURITY_PASSWORD_HASH_ALGO} \
+    --set gitea.config.service.oauth2.JWT_SECRET=${APP_HELM_VALUE_GITEA_CONFIG_SERVICE_OAUTH2_JWT_SECRET} \
+    --namespace=git-limbosolutions-com
+fi
--- a/ops-scripts/apply-infra.sh
+++ b/ops-scripts/apply-infra.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+set -e
+echo "Executing infra deploy."
+
+kubectl kustomize deploy/infra | kubectl apply -f -
+
+
Author	SHA1	Message	Date
Márcio Fernandes	f5df6a63db	backups added resources limits, set offsite backup size limit to 15GB All checks were successful / continuous-deploy (push) Successful in 6s Details	2025-12-04 01:16:24 +00:00
Márcio Fernandes	82f60d8371	cd: enable cron job, set helm chart to version 12.4.0 Some checks failed / continuous-deploy (push) Failing after 14m59s Details	2025-11-29 14:19:57 +00:00
Márcio Fernandes	05b76ffcf6	rename dev-scripts to ops-scripts All checks were successful / continuous-deploy (push) Successful in 4s Details	2025-11-29 14:12:29 +00:00
Márcio Fernandes	858da097f9	fix: cd clean up and working All checks were successful / continuous-deploy (push) Successful in 5s Details	2025-11-29 12:53:23 +00:00
Márcio Fernandes	c78ef18b20	fix: cd missing files All checks were successful / continuous-deploy (push) Successful in 5s Details	2025-11-29 12:50:57 +00:00
Márcio Fernandes	766866158f	fix: cd relative paths Some checks failed / continuous-deploy (push) Failing after 3s Details	2025-11-29 12:48:10 +00:00
Márcio Fernandes	1bbb18418e	fix cd shell Some checks failed / continuous-deploy (push) Failing after 3s Details	2025-11-29 12:46:27 +00:00
Márcio Fernandes	550f0585eb	continuous deploy Some checks failed / continuous-deploy (push) Failing after 3s Details	2025-11-29 12:43:42 +00:00
Márcio Fernandes	d4609cd13e	modified: README.md All checks were successful / continuous-deploy (push) Successful in 3s Details	2025-11-29 11:30:41 +00:00
Márcio Fernandes	cd0c3876ed	fix: deploy/app, added continuos-deploy gitea workflow template	2025-11-29 11:28:14 +00:00
Márcio Fernandes	26a8867587	fix: RBAC so continuous deploy service account can run helm upgrade	2025-11-29 04:39:41 +00:00
Márcio Fernandes	f32d574347	added continuous-deploy service account and RBAC	2025-11-29 04:10:40 +00:00
Márcio Fernandes	d0d8331e9a	deploy scripts & helm review: Secrets values from set instead on values, cd pre; add kustomization for infra	2025-11-29 03:45:25 +00:00
Márcio Fernandes	ee4afed826	fix: backups jobs and better documentation	2025-11-27 23:52:49 +00:00
Márcio Fernandes	b82d26f01d	borg backup sidekick review	2025-11-25 04:58:31 +00:00
Márcio Fernandes	8e1b41ef36	add deploy/app/cronjobs/.env./*.examples	2025-11-25 04:35:02 +00:00
Márcio Fernandes	2177535881	kubernetes: normalization secrets names	2025-11-25 04:22:40 +00:00
Márcio Fernandes	aa3f8f824b	start using kubernetes Kustomization, prep for continuous deploy	2025-11-25 04:13:47 +00:00
Márcio Fernandes	a23cbcdf93	repo refactoring continuous-deploy prep	2025-11-23 22:03:49 +00:00
Márcio Fernandes	fc1d941dde	some clean up	2025-11-23 21:18:35 +00:00
Márcio Fernandes	95070d9ac6	changed dev container it.limbosolutions.com/mylimbo/devcontainers/devops:latest	2025-11-23 20:56:58 +00:00
Márcio Fernandes	2404b15139	modified: .devcontainer/devcontainer.json	2025-11-19 23:26:35 +00:00
Márcio Fernandes	b65d14381a	dev container revision - using custom image - git.limbosolutions.com/mylimbo/devcontainers/devops:latest	2025-11-19 20:57:08 +00:00
Márcio Fernandes	04e5296521	dev container: proof of custom docker file	2025-10-13 21:53:51 +00:00
Márcio Fernandes	cc9906d2be	add metadata app to cron jobs	2025-10-12 22:32:47 +00:00
Márcio Fernandes	246701798d	modified: deploy/README.md modified: deploy/backups/backup-borg-offsite-cronjob.yaml	2025-10-12 18:01:00 +00:00
Márcio Fernandes	a49c5e8514	project reorganization	2025-09-27 10:38:43 +00:00
Márcio Fernandes	4e777b8b86	offsite backup revision	2025-09-21 19:47:55 +00:00
Márcio Fernandes	79ee2b8e55	increase offsite max backup size to 10GB	2025-09-16 22:47:54 +00:00
Márcio Fernandes	944caaa545	backups: git.limbosolutions.com/kb/borg-backup:latest alpine revision	2025-09-14 01:29:26 +00:00
Márcio Fernandes	192e1df7c5	- added decontainer - fix offsite backup - upgraded helm char	2025-09-13 15:00:37 +00:00
Márcio Fernandes	622c84c6be	migrate borg backups to ssh backup services	2025-05-04 00:48:13 +00:00
Márcio Fernandes	5454d9c35a	modified: README.md modified: backups/backup-cronjob.yaml renamed: backups/gitea-backup-secret.yaml -> backups/gitea-backup-secrets.yaml	2025-04-24 20:45:37 +00:00
Márcio Fernandes	f145b50722	modified: README.md	2025-04-18 22:03:27 +00:00
Márcio Fernandes	bb0ab8d72c	fix: helm values pullPolicy always	2025-04-18 21:33:04 +00:00
Márcio Fernandes	a300553291	modified: README.md	2025-04-18 21:20:24 +00:00
Márcio Fernandes	4fc469be77	feat: backups log included duration feat: offsite included size limit	2025-04-18 21:01:51 +00:00
Márcio Fernandes	4288e7fc03	refactoring (documentation review for runme)	2025-04-18 15:18:28 +00:00
Márcio Fernandes	82c13f834e	modified: README.md	2025-04-16 22:53:33 +00:00
Márcio Fernandes	96fb2ddb6c	borg offsite backup included so Maintenance actions (purge and compact)	2025-04-16 22:37:05 +00:00
Márcio Fernandes	7544fc8ced	renamed: backup/borbackup-offsite-cronjob.yaml -> backup/borgbackup-offsite-cronjob.yaml	2025-03-27 21:17:11 +00:00
Márcio Fernandes	3b4527a2a3	fix: remove collectors from metrics on postgres (error permission denied for function pg_ls_waldir)	2025-03-20 02:40:37 +00:00
Márcio Fernandes	4650ad026d	BORG backup disable ssh warnings	2025-03-19 00:02:18 +00:00
Márcio Fernandes	927e0a8a80	backup revision	2025-03-18 00:11:15 +00:00
Márcio Fernandes	4929cf97b7	feat: added borg backup job with offsite borg sync	2025-03-10 21:22:09 +00:00
Márcio Fernandes	9445b85859	added traefik public-https entrypoint	2025-03-09 13:58:03 +00:00
Márcio Fernandes	d7dd2c168e	modified: .gitignore	2025-03-09 11:55:52 +00:00
Márcio Fernandes	090a4a2e99	modified: gitea/values.yaml	2025-03-09 10:33:13 +00:00
Márcio Fernandes	a254dd734b	added cert manager configuration	2025-03-08 13:50:41 +00:00
Márcio Fernandes	365a3d1d60	fix helm-up	2025-03-02 12:34:24 +00:00
Márcio Fernandes	f79efcb68d	modified: gitea/values.yaml	2025-03-02 12:10:39 +00:00
Márcio Fernandes	5a6c8aebbd	Squashed commit of the following: commit 4a135e907363075467e9035ab7cc1b717c6c2760 Author: Márcio Fernandes <marcio.fernandes@outlook.pt> Date: Sun Mar 2 11:45:30 2025 +0000 postgres sql version 16 commit `0b67357d6b` Author: Márcio Fernandes <marcio.fernandes@outlook.pt> Date: Sun Mar 2 01:31:25 2025 +0000 moved from docker to kubernetes (k3s)	2025-03-02 12:10:23 +00:00
marcio.fernandes	2979293825	moved from docker to kubernetes (k3s) (#14 ) Co-authored-by: Márcio Fernandes Reviewed-on: #14	2025-03-02 01:33:28 +00:00
Márcio Fernandes	8fa698bd76	modified: README.md modified: docker-compose.yml	2025-01-18 17:29:53 +00:00
Márcio Fernandes	c5920fc267	branch rename	2024-10-27 00:09:16 +01:00
Márcio Fernandes	b8c893b467	prep for cdi-cd	2024-09-18 22:59:12 +01:00
Márcio Fernandes	7d5e7e96c1	modified: README.md	2024-09-02 22:38:08 +01:00
Márcio Fernandes	c4e85f0083	update docker-compose.yaml	2024-03-31 11:30:17 +01:00
Márcio Fernandes	468fe0fc3b	update docker.compode.yaml	2024-03-31 11:27:54 +01:00
Márcio Fernandes	e29a46c704	update docker-compose	2024-03-30 21:19:54 +00:00
Márcio Fernandes	db53ae4164	update docker compose	2024-03-30 21:09:04 +00:00
Márcio Fernandes	f5afe9bfb4	backup revision	2024-03-17 00:37:05 +00:00
Márcio Fernandes	06a3ea3410	Maintenance	2024-02-18 23:43:58 +00:00
Márcio Fernandes	b3e0f1aa21	fix: change docker image tag (#11 )	2023-09-12 19:57:09 +01:00
Márcio Fernandes	25e77d9a73	feat: duplicati backup influxdb trace	2023-06-11 08:36:00 +01:00
Márcio Fernandes	874371dfed	doc: du	2023-03-11 15:00:25 +00:00
Márcio Fernandes	9f503809e4	feat: backup notification configuration from environment variables	2023-03-11 14:26:43 +00:00
Márcio Fernandes	0a0a94c64d	doc: backup documentation	2023-03-11 13:40:15 +00:00
Márcio Fernandes	bb2f1f219f	doc: administration documentation	2023-03-11 12:59:27 +00:00
Márcio Fernandes	e131129f3f	doc: administration documentation	2023-03-11 12:55:52 +00:00
Márcio Fernandes	01fb09e12d	production	2023-03-05 21:40:40 +00:00
Márcio Fernandes	018e96fd8f	doc: documentation	2023-03-05 21:39:58 +00:00
Márcio Fernandes	2b252641fe	Production	2023-03-05 21:16:42 +00:00
Márcio Fernandes	aab56885b1	update to version 1.18	2023-02-25 23:16:54 +00:00
Márcio Fernandes	81efcaa68d	better documentation	2022-12-13 00:54:12 +00:00
Márcio Fernandes	94d7b1c315	add info	2022-12-12 21:44:16 +00:00
Márcio Fernandes	c445799004	refactoring	2022-12-12 21:43:27 +00:00
Márcio Fernandes	b4a0135061	refactoring	2022-12-12 21:41:58 +00:00
marcio.fernandes	1168eca269	Update 'README.md'	2022-10-11 20:55:57 +00:00
marcio.fernandes	7d7b0dad57	Update 'README.md'	2022-10-11 20:55:18 +00:00
marcio.fernandes	d5bbf27226	Update 'README.md'	2022-10-11 19:17:26 +00:00
marcio.fernandes	01d627d51c	Update 'documentation/setup.md'	2022-10-10 23:20:38 +00:00
marcio.fernandes	00e0e1a22e	Delete 'documentation/issue#8.md'	2022-10-10 23:17:07 +00:00
marcio.fernandes	536d49fb85	Update 'documentation/setup.md'	2022-10-10 23:16:10 +00:00
marcio.fernandes	68182a7218	Update 'documentation/setup.md'	2022-10-10 23:12:23 +00:00
Márcio Fernandes	16543559a9	feat: #8 - converted to a lxc hosting	2022-10-09 18:48:15 +01:00
marcio.fernandes	fb360ec5e7	Merge pull request 'modified: .gitignore' (#9 ) from feature/gitignore into master Reviewed-on: #9	2022-10-01 15:54:13 +01:00
Márcio Fernandes	e9606fcc1d	modified: .gitignore	2022-10-01 15:47:42 +01:00