From f75732a25cb5d28cdcb0fd1f56547c083a33d68e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?M=C3=A1rcio=20Fernandes?= <marcio.fernandes@outlook.pt>
Date: Thu, 16 Jul 2026 20:15:25 +0000
Subject: [PATCH] add backups to fluxcd

---
 README.md                             |  1 +
 deploy/backups/.env.d/.gitignore      |  3 ---
 deploy/backups/.env.d/pbs.env.example |  3 ---
 deploy/backups/backup-secrets.yaml    | 24 ++++++++++++++++++++++++
 deploy/backups/kustomization.yaml     | 10 ++--------
 deploy/kustomization.yaml             |  4 +---
 6 files changed, 28 insertions(+), 17 deletions(-)
 delete mode 100644 deploy/backups/.env.d/.gitignore
 delete mode 100644 deploy/backups/.env.d/pbs.env.example
 create mode 100644 deploy/backups/backup-secrets.yaml

diff --git a/README.md b/README.md
index 39310d8..2d4df06 100644
--- a/README.md
+++ b/README.md
@@ -153,6 +153,7 @@ su -s /bin/bash www-data -c "php occ maintenance:repair --include-expensive"
 ``` bash
 sops -e ./deploy/whiteboard/whiteboard-secrets.dec.yaml > ./deploy/whiteboard/whiteboard-secrets.yaml
 sops -e ./deploy/onlyoffice/onlyoffice-secrets.dec.yaml > ./deploy/onlyoffice/onlyoffice-secrets.yaml
+sops -e ./deploy/backups/backup-secrets.dec.yaml > ./deploy/backups/backup-secrets.yaml
 ```
 
 ## internal logs
diff --git a/deploy/backups/.env.d/.gitignore b/deploy/backups/.env.d/.gitignore
deleted file mode 100644
index 9621539..0000000
--- a/deploy/backups/.env.d/.gitignore
+++ /dev/null
@@ -1,3 +0,0 @@
-**
-!.gitignore
-!**.example
\ No newline at end of file
diff --git a/deploy/backups/.env.d/pbs.env.example b/deploy/backups/.env.d/pbs.env.example
deleted file mode 100644
index 372cde9..0000000
--- a/deploy/backups/.env.d/pbs.env.example
+++ /dev/null
@@ -1,3 +0,0 @@
-PBS_REPOSITORY=????
-PBS_PASSWORD=????
-PBS_FINGERPRINT=???
\ No newline at end of file
diff --git a/deploy/backups/backup-secrets.yaml b/deploy/backups/backup-secrets.yaml
new file mode 100644
index 0000000..b032b19
--- /dev/null
+++ b/deploy/backups/backup-secrets.yaml
@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: backup-secret
+metadata:
+    name: whiteboard
+type: Opaque
+stringData:
+    PBS_REPOSITORY: ENC[AES256_GCM,data:H0thvyl/bFIV41w2/f6N1Yp1fmcbLsm6xql1jqRfVUNbrhSUeZFnr2DZncXCJxzsz2/nSAA=,iv:su38RFafhPQLiVyAPIgtbX2GDdnxDWq7PickEH6xp/c=,tag:PSl6U+62TIRNyFDNYhvl6g==,type:str]
+    PBS_PASSWORD: ENC[AES256_GCM,data:Uqa5mVNiw0JpAheuM2qjpsGVBxUomoZr0HZMe2ok3TN4lJZY,iv:Qu0r5qQO5kBWUzVXFmHAvTVvCYYUbCOLxId9/jfRlVk=,tag:c3CSF/DgbCxKp8dnUM6ghg==,type:str]
+    PBS_FINGERPRINT: ENC[AES256_GCM,data:QHo426ZFGfviF/1YuCLB5Zu7L08/hOP18+qMFUN7PNae7xgx17myJHO392GG7nSLOfWaLo1SGoKobHszjjC5vnOMLD3otiffrG1ccbOXG7XZWvjmp2/UJleXTxTuVAQ=,iv:c2fegRxSHw9kRjry7mYweCyXMPc4+wsW4B24N9Vq8Jk=,tag:6QjTgVKF94IawhjCuOwVow==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxSDFjbjRnaW9ZZ0lyWGts
+            Z3FKbGhBeWYyaTllRkUvZ1Q4T2FVdlZzRmk4ClU5clFBVUlzeFJUTnREWVlYSmY5
+            eHlNYlV4ZWhkaS9BTU5uMllBd290bnMKLS0tIElVUGY3QkRJR2wyR3ZQcGNSQ0th
+            QVFoUnJrZURWc25RZjE2UVhCa2tka3cKQPKBLPjqW0Bz3Cm7Bc6F6GAGxyQKyqEP
+            nQGmu6R6xzJu+TPqyQRrPnY0TGbdbaPyQTItAkC1kRJ2ibrH+zuQMg==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age17efn4arj07weaak2qmsgh53qvmfhpeun4xxanakd9q7xwqxyvcpsw0zn5g
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-07-16T20:14:42Z"
+    mac: ENC[AES256_GCM,data:jWASjOr2fwUCWzwJwf0F6xf0+zzIGzAI2/zOC5uRkN1Bt0rTpsRDvbl70yYGGJgZjUx/LwS2uTY8mNnp6xBl3hsPTxTMijKaDM4gt8nc1zVpZLsSpg9x3stHlzHU7ecl+ZOHEuE4J8N2gvO27Cr31VqXbn5kY06t/47LLZM0N9M=,iv:Wq1nkieopl8ZlMNxqlnTwN/XpUpKx7mxMvKDSuuCMH8=,tag:5enLTOxfnBOtSBeo0wDoHQ==,type:str]
+    version: 3.13.1
diff --git a/deploy/backups/kustomization.yaml b/deploy/backups/kustomization.yaml
index d3f4742..b888ad9 100644
--- a/deploy/backups/kustomization.yaml
+++ b/deploy/backups/kustomization.yaml
@@ -3,12 +3,6 @@ kind: Kustomization
 
 resources:
   - ./backup-pbs-cronjob.yaml
-  
-secretGenerator:
-- name: backup-secret
-  envs:
-    - ./.env.d/pbs.env
+  - ./backup-secrets.yaml
+
 
-generatorOptions:
-  disableNameSuffixHash: true
-namespace: cloud-limbosolutions-com
diff --git a/deploy/kustomization.yaml b/deploy/kustomization.yaml
index bb2c6ab..40f4be4 100644
--- a/deploy/kustomization.yaml
+++ b/deploy/kustomization.yaml
@@ -4,9 +4,7 @@ namespace: cloud-limbosolutions-com
 resources:
   - global
   #- nextcloud
-  #- backups
+  - backups
   - onlyoffice
   - whiteboard
-generatorOptions:
-  disableNameSuffixHash: true