add backups to fluxcd

README.md

@@ -153,6 +153,7 @@ su -s /bin/bash www-data -c "php occ maintenance:repair --include-expensive"
 ``` bash
 sops -e ./deploy/whiteboard/whiteboard-secrets.dec.yaml > ./deploy/whiteboard/whiteboard-secrets.yaml
 sops -e ./deploy/onlyoffice/onlyoffice-secrets.dec.yaml > ./deploy/onlyoffice/onlyoffice-secrets.yaml
+sops -e ./deploy/backups/backup-secrets.dec.yaml > ./deploy/backups/backup-secrets.yaml
 ```
 
 ## internal logs

deploy/backups/.env.d/.gitignore

@@ -1,3 +0,0 @@
-**
-!.gitignore
-!**.example

deploy/backups/.env.d/pbs.env.example

@@ -1,3 +0,0 @@
-PBS_REPOSITORY=????
-PBS_PASSWORD=????
-PBS_FINGERPRINT=???

deploy/backups/backup-secrets.yaml

@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: backup-secret
+metadata:
+    name: whiteboard
+type: Opaque
+stringData:
+    PBS_REPOSITORY: ENC[AES256_GCM,data:H0thvyl/bFIV41w2/f6N1Yp1fmcbLsm6xql1jqRfVUNbrhSUeZFnr2DZncXCJxzsz2/nSAA=,iv:su38RFafhPQLiVyAPIgtbX2GDdnxDWq7PickEH6xp/c=,tag:PSl6U+62TIRNyFDNYhvl6g==,type:str]
+    PBS_PASSWORD: ENC[AES256_GCM,data:Uqa5mVNiw0JpAheuM2qjpsGVBxUomoZr0HZMe2ok3TN4lJZY,iv:Qu0r5qQO5kBWUzVXFmHAvTVvCYYUbCOLxId9/jfRlVk=,tag:c3CSF/DgbCxKp8dnUM6ghg==,type:str]
+    PBS_FINGERPRINT: ENC[AES256_GCM,data:QHo426ZFGfviF/1YuCLB5Zu7L08/hOP18+qMFUN7PNae7xgx17myJHO392GG7nSLOfWaLo1SGoKobHszjjC5vnOMLD3otiffrG1ccbOXG7XZWvjmp2/UJleXTxTuVAQ=,iv:c2fegRxSHw9kRjry7mYweCyXMPc4+wsW4B24N9Vq8Jk=,tag:6QjTgVKF94IawhjCuOwVow==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxSDFjbjRnaW9ZZ0lyWGts
+            Z3FKbGhBeWYyaTllRkUvZ1Q4T2FVdlZzRmk4ClU5clFBVUlzeFJUTnREWVlYSmY5
+            eHlNYlV4ZWhkaS9BTU5uMllBd290bnMKLS0tIElVUGY3QkRJR2wyR3ZQcGNSQ0th
+            QVFoUnJrZURWc25RZjE2UVhCa2tka3cKQPKBLPjqW0Bz3Cm7Bc6F6GAGxyQKyqEP
+            nQGmu6R6xzJu+TPqyQRrPnY0TGbdbaPyQTItAkC1kRJ2ibrH+zuQMg==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age17efn4arj07weaak2qmsgh53qvmfhpeun4xxanakd9q7xwqxyvcpsw0zn5g
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-07-16T20:14:42Z"
+    mac: ENC[AES256_GCM,data:jWASjOr2fwUCWzwJwf0F6xf0+zzIGzAI2/zOC5uRkN1Bt0rTpsRDvbl70yYGGJgZjUx/LwS2uTY8mNnp6xBl3hsPTxTMijKaDM4gt8nc1zVpZLsSpg9x3stHlzHU7ecl+ZOHEuE4J8N2gvO27Cr31VqXbn5kY06t/47LLZM0N9M=,iv:Wq1nkieopl8ZlMNxqlnTwN/XpUpKx7mxMvKDSuuCMH8=,tag:5enLTOxfnBOtSBeo0wDoHQ==,type:str]
+    version: 3.13.1

deploy/backups/kustomization.yaml

@@ -3,12 +3,6 @@ kind: Kustomization
 
 resources:
   - ./backup-pbs-cronjob.yaml
+  - ./backup-secrets.yaml
 
-secretGenerator:
-- name: backup-secret
-  envs:
-    - ./.env.d/pbs.env
 
-generatorOptions:
-  disableNameSuffixHash: true
-namespace: cloud-limbosolutions-com

deploy/kustomization.yaml

@@ -4,9 +4,7 @@ namespace: cloud-limbosolutions-com
 resources:
   - global
   #- nextcloud
-  #- backups
+  - backups
   - onlyoffice
   - whiteboard
-generatorOptions:
-  disableNameSuffixHash: true