git.limbosolutions.com

Welcome to public repository of my Git Server

Using gitea as git server.

• Setup
  • kubernetes Namespace
  • Add Help Chart
  • Update Helm charts
  • Install / Update
  • ssh ingress
• Backups
  • Proxmox Backup Server (kubernetes cron job)
  • Borg and Offsite sync (kubernetes cron job)
  • borgbackup sidekick
    • Create borgbackup-sidekick pod
    • Remove borgbackup-sidekick pod

Setup

kubernetes Namespace

apiVersion: v1
kind: Namespace
metadata:
  name: git-limbosolutions-com
  labels:
    name: git-limbosolutions-com

Add Help Chart

helm repo add gitea-charts https://dl.gitea.com/charts/

Update Helm charts

helm repo update

Install / Update

helm upgrade --install gitea gitea-charts/gitea \
--values ./gitea/values.yaml \
--values ./gitea/values.private.yaml \
--namespace=git-limbosolutions-com

ssh ingress

kubectl apply -f ./gitea/ssh-ingress.yaml

Backups

Proxmox Backup Server (kubernetes cron job)

# deploy cronjon
kubectl apply -f ./backups/backup-cronjob.yaml -n git-limbosolutions-com

kubernetes cron job

Borg and Offsite sync (kubernetes cron job)

set -a
source ./backups/.env
set +a
envsubst < ./backups/gitea-backup-secret.yaml | kubectl apply -n git-limbosolutions-com -f -

SSH_ID_RSA=$(echo -n "$SSH_ID_RSA" | base64 -w 0)
BORG_KEY_FILE=$(echo -n "$BORG_KEY_FILE" | base64 -w 0)

kubectl patch secret gitea-backup-secret --patch "{\"data\":{\"SSH_ID_RSA\":\"$SSH_ID_RSA\"}}"
kubectl patch secret gitea-backup-secret --patch "{\"data\":{\"BORG_KEY_FILE\":\"$BORG_KEY_FILE\"}}"

# deploy cronjon
kubectl apply -f ./backups/borgbackup-offsite-cronjob.yaml

kubernetes cron job

borgbackup sidekick

# attach to borgbackup-sidekick
POD_NAME=$(kubectl get pod -l app=borgbackup-sidekick -n git-limbosolutions-com -o jsonpath='{.items[0].metadata.name}')
kubectl exec -it ${POD_NAME}  -- bash

# list borg repo
POD_NAME=$(kubectl get pod -l app=borgbackup-sidekick -n git-limbosolutions-com -o jsonpath='{.items[0].metadata.name}')
kubectl exec -it ${POD_NAME} -- bash -c "\
borg list ${BORG_REPO} \
"

# get borg info
POD_NAME=$(kubectl get pod -l app=borgbackup-sidekick -n git-limbosolutions-com -o jsonpath='{.items[0].metadata.name}')
kubectl exec -it ${POD_NAME} -- bash -c "\
borg info ${BORG_REPO}\
"

POD_NAME=$(kubectl get pod -l app=borgbackup-sidekick -n git-limbosolutions-com -o jsonpath='{.items[0].metadata.name}')
# Check if repository size is greater than 4GB
kubectl exec -it ${POD_NAME} -- bash -c "\
MAX_SIZE=\$((4 * 1024 * 1024 * 1024))
SIZE_IN_BYTES=\$(\${BORG_RSH} mf@backupsrv01.dev.lan \"du -b ~/borg-repos/git.limbosolutions.com --max-depth=0 | cut -f1 \") && \
echo \"Repository size: \$((SIZE_IN_BYTES / 1024 / 1024)) MB\" && \
if [ \$SIZE_IN_BYTES -gt \$MAX_SIZE ]; then \
   echo 'Repository size exceeds \$MAX_SIZE'; \
   exit 1; \
else \
   echo 'Repository size is within limits for offsite sync'; \
fi \

"

Create borgbackup-sidekick pod

kubectl apply -f ./backups/borgbackup-sidekick.yaml

Remove borgbackup-sidekick pod

# delete the sidekick pod after use
kubectl delete pod -l app=borgbackup-sidekick