93 lines
2.9 KiB
YAML
93 lines
2.9 KiB
YAML
|
---
|
||
|
|
# OpenCloud Daily Backup to Hetzner Object Storage
|
||
|
|
apiVersion: batch/v1
|
||
|
|
kind: CronJob
|
||
|
|
metadata:
|
||
|
|
name: opencloud-backup
|
||
|
|
namespace: opencloud
|
||
|
|
spec:
|
||
|
|
schedule: "0 2 * * *" # Daily at 2 AM UTC
|
||
|
|
concurrencyPolicy: Forbid
|
||
|
|
successfulJobsHistoryLimit: 3
|
||
|
|
failedJobsHistoryLimit: 3
|
||
|
|
jobTemplate:
|
||
|
|
spec:
|
||
|
|
template:
|
||
|
|
spec:
|
||
|
|
restartPolicy: OnFailure
|
||
|
|
containers:
|
||
|
|
- name: backup
|
||
|
|
image: rclone/rclone:latest
|
||
|
|
command:
|
||
|
|
- /bin/sh
|
||
|
|
- -c
|
||
|
|
- |
|
||
|
|
set -e
|
||
|
|
DATE=$(date +%Y%m%d-%H%M%S)
|
||
|
|
echo "Starting OpenCloud backup at $DATE"
|
||
|
|
|
||
|
|
# Configure rclone for Hetzner S3
|
||
|
|
cat > /root/.config/rclone/rclone.conf <<EOC
|
||
|
|
[hetzner-s3]
|
||
|
|
type = s3
|
||
|
|
provider = Other
|
||
|
|
access_key_id = ${S3_ACCESS_KEY}
|
||
|
|
secret_access_key = ${S3_SECRET_KEY}
|
||
|
|
endpoint = https://fsn1.your-objectstorage.com
|
||
|
|
region = fsn1
|
||
|
|
acl = private
|
||
|
|
EOC
|
||
|
|
|
||
|
|
# Backup OpenCloud data directory
|
||
|
|
echo "Backing up data directory..."
|
||
|
|
rclone sync /data hetzner-s3:opencloud-backup/data-${DATE} \
|
||
|
|
--progress \
|
||
|
|
--transfers 8 \
|
||
|
|
--checkers 8 \
|
||
|
|
--stats 1m
|
||
|
|
|
||
|
|
# Backup configuration
|
||
|
|
echo "Backing up configuration..."
|
||
|
|
rclone copy /config hetzner-s3:opencloud-backup/config-${DATE} \
|
||
|
|
--progress
|
||
|
|
|
||
|
|
# Keep only last 7 days of backups
|
||
|
|
echo "Cleaning old backups (keeping last 7 days)..."
|
||
|
|
rclone delete hetzner-s3:opencloud-backup \
|
||
|
|
--min-age 7d \
|
||
|
|
--rmdirs
|
||
|
|
|
||
|
|
echo "Backup completed successfully at $(date)"
|
||
|
|
env:
|
||
|
|
- name: S3_ACCESS_KEY
|
||
|
|
valueFrom:
|
||
|
|
secretKeyRef:
|
||
|
|
name: hetzner-s3-credentials
|
||
|
|
key: access-key
|
||
|
|
- name: S3_SECRET_KEY
|
||
|
|
valueFrom:
|
||
|
|
secretKeyRef:
|
||
|
|
name: hetzner-s3-credentials
|
||
|
|
key: secret-key
|
||
|
|
volumeMounts:
|
||
|
|
- name: opencloud-data
|
||
|
|
mountPath: /data
|
||
|
|
readOnly: true
|
||
|
|
- name: opencloud-config
|
||
|
|
mountPath: /config
|
||
|
|
readOnly: true
|
||
|
|
resources:
|
||
|
|
requests:
|
||
|
|
memory: "256Mi"
|
||
|
|
cpu: "100m"
|
||
|
|
limits:
|
||
|
|
memory: "512Mi"
|
||
|
|
cpu: "500m"
|
||
|
|
volumes:
|
||
|
|
- name: opencloud-data
|
||
|
|
persistentVolumeClaim:
|
||
|
|
claimName: opencloud-data
|
||
|
|
- name: opencloud-config
|
||
|
|
configMap:
|
||
|
|
name: opencloud-config
|