157 lines
5.0 KiB
YAML
157 lines
5.0 KiB
YAML
|
|
apiVersion: batch/v1
|
|
kind: CronJob
|
|
metadata:
|
|
name: backup-borg-offsite
|
|
namespace: git-limbosolutions-com
|
|
spec:
|
|
schedule: "0 16 * * 0" #every sunday at 4pm
|
|
jobTemplate:
|
|
spec:
|
|
backoffLimit: 1
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: offsite-backup
|
|
spec:
|
|
restartPolicy: Never
|
|
initContainers:
|
|
- name: postgres-export
|
|
image: postgres:latest
|
|
command: ["sh", "-c"]
|
|
args:
|
|
- |
|
|
set -e
|
|
. /root/.gitea-inline-config/database
|
|
export PGPASSWORD=$PASSWD
|
|
pg_dump -h gitea-postgresql.git-limbosolutions-com.svc.cluster.local -U $USER -d $NAME > /data/postgresql-export/db_backup.sql
|
|
|
|
volumeMounts:
|
|
|
|
- name: backup-var-data
|
|
mountPath: /data/postgresql-export
|
|
subPath: postgresql-export
|
|
|
|
- name: gitea-inline-config
|
|
mountPath: /root/.gitea-inline-config
|
|
readOnly: true
|
|
|
|
|
|
|
|
containers:
|
|
- name: borg-client
|
|
image: git.limbosolutions.com/kb/borg-backup:latest
|
|
imagePullPolicy: Always
|
|
# resources:
|
|
# limits:
|
|
# memory: "512Mi"
|
|
# cpu: "500m"
|
|
# requests:
|
|
# memory: "256Mi"
|
|
# cpu: "250m"
|
|
env:
|
|
- name: BORG_REPO
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: gitea-backup-secret
|
|
key: borg_repo
|
|
|
|
- name: BORG_PASSPHRASE
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: gitea-backup-secret
|
|
key: borg_passphrase
|
|
|
|
|
|
- name: OFFSITE_TARGET_FOLDER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: gitea-backup-secret
|
|
key: offsite_target_folder
|
|
|
|
|
|
- name: BORG_RSH
|
|
value: ssh -p 2222 -o StrictHostKeyChecking=no -o LogLevel=ERROR
|
|
|
|
- name: REPO_SYNC_MAX_SIZE
|
|
value: "10737418240" # 10GB
|
|
|
|
- name: MODE
|
|
value: SHELL
|
|
|
|
|
|
args:
|
|
- |
|
|
set -e
|
|
|
|
SCRIPT_START_TIME=$(date +%s)
|
|
|
|
# while true; do
|
|
# sleep 5
|
|
# done
|
|
|
|
borg create ${BORG_REPO}::postgresql-export-$(date +%Y%m%d%H%M%S) /data/postgresql-export
|
|
borg create ${BORG_REPO}::gitea-data-$(date +%Y%m%d%H%M%S) /data/gitea-data
|
|
|
|
#cleanup
|
|
borg prune -v --list --keep-daily=10 --keep-weekly=7 --keep-monthly=-1 ${BORG_REPO} --glob-archives='gitea-data*'
|
|
borg prune -v --list --keep-daily=10 --keep-weekly=7 --keep-monthly=-1 ${BORG_REPO} --glob-archives='postgresql-export*'
|
|
borg compact ${BORG_REPO}
|
|
|
|
# check repo size
|
|
REPO_SIZE_IN_BYTES=$(remote-get-folder-size)
|
|
echo "Repository size: $((REPO_SIZE_IN_BYTES / 1024 / 1024))MB"
|
|
|
|
if [ $REPO_SIZE_IN_BYTES -gt $REPO_SYNC_MAX_SIZE ]; then \
|
|
echo "ERROR: Repository size $((REPO_SIZE_IN_BYTES / 1024 / 1024))MB exceeds $((REPO_SYNC_MAX_SIZE / 1024 / 1024))MB";
|
|
exit 1;
|
|
else
|
|
# Repository size is within limits for offsite sync
|
|
# ssh to backup server and enforce rclone to onedrive
|
|
remote-connect "rclone sync $SSH_FOLDER $OFFSITE_TARGET_FOLDER --progress" && \
|
|
echo "INFO: Finished Backup of git.limbosolutions.com (offsite) ($((SCRIPT_DURATION / 60 / 60)):$((SCRIPT_DURATION / 60)):$((SCRIPT_DURATION % 60))) "
|
|
fi
|
|
|
|
#outputs info
|
|
borg info ${BORG_REPO}
|
|
#borg info ${BORG_REPO} --json
|
|
|
|
volumeMounts:
|
|
- name: gitea-data
|
|
mountPath: /data/gitea-data
|
|
|
|
- name: backup-var-data
|
|
mountPath: /data/postgresql-export
|
|
subPath: postgresql-export
|
|
|
|
- name: gitea-backup-secret
|
|
mountPath: /root/.ssh/id_rsa
|
|
subPath: ssh_id_rsa
|
|
readOnly: true
|
|
|
|
- name: gitea-backup-secret
|
|
mountPath: /app/borg/key
|
|
subPath: borg_key
|
|
|
|
volumes:
|
|
|
|
- name: gitea-data
|
|
persistentVolumeClaim:
|
|
claimName: gitea-shared-storage
|
|
|
|
- name: gitea-inline-config
|
|
secret:
|
|
secretName: gitea-inline-config
|
|
|
|
- name: gitea-backup-secret
|
|
secret:
|
|
secretName: gitea-backup-secret
|
|
defaultMode: 0600
|
|
|
|
- name: backup-var-data
|
|
emptyDir: {}
|
|
|
|
|
|
|
|
|