Files
homelab/kubernetes/app/media/cronjob-backup.yaml

139 lines
4.6 KiB
YAML

apiVersion: batch/v1
kind: CronJob
metadata:
name: media-db-backup
namespace: media
labels:
app: media-backup
spec:
schedule: "0 3 * * *"
concurrencyPolicy: Forbid
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
jobTemplate:
spec:
template:
metadata:
labels:
app: media-backup
spec:
restartPolicy: OnFailure
initContainers:
- name: pg-dump-sonarr
image: postgres:14.21
env:
- name: PGHOST
value: sonarr-db
- name: PGUSER
valueFrom:
secretKeyRef:
name: media-db-credentials
key: SONARR_DB_USER
- name: PGPASSWORD
valueFrom:
secretKeyRef:
name: media-db-credentials
key: SONARR_DB_PASSWORD
- name: PGDATABASE
valueFrom:
secretKeyRef:
name: media-db-credentials
key: SONARR_DB_NAME
command:
- sh
- -c
- pg_dump --clean --if-exists > /backup/sonarr.sql
volumeMounts:
- name: backup-tmp
mountPath: /backup
- name: pg-dump-radarr
image: postgres:14.21
env:
- name: PGHOST
value: radarr-db
- name: PGUSER
valueFrom:
secretKeyRef:
name: media-db-credentials
key: RADARR_DB_USER
- name: PGPASSWORD
valueFrom:
secretKeyRef:
name: media-db-credentials
key: RADARR_DB_PASSWORD
- name: PGDATABASE
valueFrom:
secretKeyRef:
name: media-db-credentials
key: RADARR_DB_NAME
command:
- sh
- -c
- pg_dump --clean --if-exists > /backup/radarr.sql
volumeMounts:
- name: backup-tmp
mountPath: /backup
- name: pg-dump-seerr
image: postgres:14.21
env:
- name: PGHOST
value: seerr-db
- name: PGUSER
valueFrom:
secretKeyRef:
name: seerr-credentials
key: SEERR_DB_USER
- name: PGPASSWORD
valueFrom:
secretKeyRef:
name: seerr-credentials
key: SEERR_DB_PASSWORD
- name: PGDATABASE
valueFrom:
secretKeyRef:
name: seerr-credentials
key: SEERR_DB_NAME
command:
- sh
- -c
- pg_dump --clean --if-exists > /backup/seerr.sql
volumeMounts:
- name: backup-tmp
mountPath: /backup
containers:
- name: resticprofile
image: creativeprojects/resticprofile:0.32.0
command:
- sh
- -c
- |
resticprofile -c /secrets/profiles.yaml -n sonarr-db backup
resticprofile -c /secrets/profiles.yaml -n sonarr-db copy
resticprofile -c /secrets/profiles.yaml -n radarr-db backup
resticprofile -c /secrets/profiles.yaml -n radarr-db copy
resticprofile -c /secrets/profiles.yaml -n seerr-db backup
resticprofile -c /secrets/profiles.yaml -n seerr-db copy
env:
- name: B2_ACCOUNT_ID
valueFrom:
secretKeyRef:
name: media-backup-config
key: B2_ACCOUNT_ID
- name: B2_ACCOUNT_KEY
valueFrom:
secretKeyRef:
name: media-backup-config
key: B2_ACCOUNT_KEY
volumeMounts:
- name: secrets
mountPath: /secrets
readOnly: true
- name: backup-tmp
mountPath: /backup
volumes:
- name: secrets
secret:
secretName: media-backup-config
- name: backup-tmp
emptyDir: {}