145 lines
4.3 KiB
YAML
145 lines
4.3 KiB
YAML
apiVersion: batch/v1
|
|
kind: CronJob
|
|
metadata:
|
|
name: firefly-db-backup
|
|
namespace: firefly
|
|
labels:
|
|
app: firefly-backup
|
|
spec:
|
|
schedule: "0 2 * * *"
|
|
concurrencyPolicy: Forbid
|
|
successfulJobsHistoryLimit: 3
|
|
failedJobsHistoryLimit: 3
|
|
jobTemplate:
|
|
spec:
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: firefly-backup
|
|
spec:
|
|
restartPolicy: OnFailure
|
|
initContainers:
|
|
- name: pg-dump
|
|
image: postgres:17
|
|
imagePullPolicy: IfNotPresent
|
|
env:
|
|
- name: PGHOST
|
|
value: firefly-db
|
|
- name: PGUSER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: firefly-credentials
|
|
key: DB_USERNAME
|
|
- name: PGPASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: firefly-credentials
|
|
key: DB_PASSWORD
|
|
- name: PGDATABASE
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: firefly-credentials
|
|
key: DB_DATABASE
|
|
command:
|
|
- sh
|
|
- -c
|
|
- pg_dump --clean --if-exists > /backup/dump.sql
|
|
volumeMounts:
|
|
- name: backup-tmp
|
|
mountPath: /backup
|
|
containers:
|
|
- name: resticprofile
|
|
image: creativeprojects/resticprofile:0.32.0
|
|
imagePullPolicy: IfNotPresent
|
|
command:
|
|
- sh
|
|
- -c
|
|
- |
|
|
resticprofile -c /secrets/profiles.yaml -n firefly-db backup
|
|
resticprofile -c /secrets/profiles.yaml -n firefly-db copy
|
|
env:
|
|
- name: B2_ACCOUNT_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: firefly-backup-config
|
|
key: B2_ACCOUNT_ID
|
|
- name: B2_ACCOUNT_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: firefly-backup-config
|
|
key: B2_ACCOUNT_KEY
|
|
volumeMounts:
|
|
- name: secrets
|
|
mountPath: /secrets
|
|
readOnly: true
|
|
- name: backup-tmp
|
|
mountPath: /backup
|
|
volumes:
|
|
- name: secrets
|
|
secret:
|
|
secretName: firefly-backup-config
|
|
- name: backup-tmp
|
|
emptyDir: {}
|
|
---
|
|
apiVersion: batch/v1
|
|
kind: CronJob
|
|
metadata:
|
|
name: firefly-uploads-backup
|
|
namespace: firefly
|
|
labels:
|
|
app: firefly-backup
|
|
spec:
|
|
schedule: "0 3 * * *"
|
|
concurrencyPolicy: Forbid
|
|
successfulJobsHistoryLimit: 3
|
|
failedJobsHistoryLimit: 3
|
|
jobTemplate:
|
|
spec:
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: firefly-backup
|
|
spec:
|
|
restartPolicy: OnFailure
|
|
containers:
|
|
- name: resticprofile
|
|
image: creativeprojects/resticprofile:0.32.0
|
|
imagePullPolicy: IfNotPresent
|
|
command:
|
|
- sh
|
|
- -c
|
|
- |
|
|
resticprofile -c /secrets/profiles.yaml -n firefly-uploads backup
|
|
resticprofile -c /secrets/profiles.yaml -n firefly-uploads copy
|
|
env:
|
|
- name: B2_ACCOUNT_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: firefly-backup-config
|
|
key: B2_ACCOUNT_ID
|
|
- name: B2_ACCOUNT_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: firefly-backup-config
|
|
key: B2_ACCOUNT_KEY
|
|
volumeMounts:
|
|
- name: secrets
|
|
mountPath: /secrets
|
|
readOnly: true
|
|
- name: uploads
|
|
mountPath: /uploads
|
|
readOnly: true
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
memory: 1Gi
|
|
volumes:
|
|
- name: secrets
|
|
secret:
|
|
secretName: firefly-backup-config
|
|
- name: uploads
|
|
persistentVolumeClaim:
|
|
claimName: firefly-firefly-iii
|