apiVersion: batch/v1
kind: CronJob
metadata:
  name: gitea-backup
  namespace: git-limbosolutions-com
spec:
  schedule: "0 1 * * *"
  jobTemplate:
    spec:
      backoffLimit: 1
      template:
        spec:
          restartPolicy: Never
          initContainers:
            - name: postgres-export
              image: postgres:latest
              command: ["sh", "-c"]
              args:
                - |
                  echo "INFO: Starting export"
                  . /run/database-access-secret/database
                  export PGPASSWORD=$PASSWD
                  echo "INFO: Exporting database"
                  pg_dump -h gitea-postgresql.git-limbosolutions-com.svc.cluster.local -U $USER -d $NAME > /data/postgresql-export/db_backup.sql
                  if [ $? -ne 0 ]; then
                    echo "ERROR: Exporting database failed"
                    exit 1
                  fi
                  echo "INFO: Exporting database finished"

              volumeMounts:
              - name: db-postgresql-data
                mountPath: /var/lib/postgresql/data
                
              - name: backup-run-data
                mountPath: /data/postgresql-export
                subPath: postgresql-export

              - name: database-access-secret
                mountPath: /run/database-access-secret
                readOnly: true

          containers:
            - name: gitea-pbs-client
              image: git.limbosolutions.com/kb/pbsclient
              env:  
                - name: MODE
                  value: shell
                - name: PBS_REPOSITORY
                  valueFrom:
                    secretKeyRef:
                      name: gitea-backup-secret
                      key:  PBS_REPOSITORY
                - name: PBS_PASSWORD
                  valueFrom:
                    secretKeyRef:
                      name: gitea-backup-secret
                      key: PBS_PASSWORD
                - name: PBS_FINGERPRINT
                  valueFrom:
                    secretKeyRef:
                      name: gitea-backup-secret
                      key: PBS_FINGERPRINT

              command: ["bash", "-c"]
              args:
                - |
                  proxmox-backup-client backup gitea-data.pxar:/data/gitea-data postgresql-data.pxar:/data/postgresql-data postgresql-export.pxar:/data/postgresql-export --include-dev /data/postgresql-data --include-dev /data/postgresql-export --include-dev /data/gitea-data --backup-id "gitea-full" -ns git.limbosolutions.com
                  echo "INFO: git.limbosolutions.com finished"

              volumeMounts:
              - name: gitea-shared-storage
                mountPath: /data/gitea-data

              - name: db-postgresql-data
                mountPath: /data/postgresql-data
              
              - name: backup-run-data
                mountPath: /data/postgresql-export
                subPath: postgresql-export

              - name: backup-run-data
                mountPath: /tmp
                subPath: tmp
        

          volumes:
            - name: gitea-shared-storage
              persistentVolumeClaim:
                claimName: gitea-shared-storage

            - name: db-postgresql-data
              persistentVolumeClaim:
                claimName: data-gitea-postgresql-0
          
            - name: backup-run-data
              emptyDir: {}

            - name: database-access-secret
              secret:
                secretName: gitea-inline-config