35 lines
2 KiB
YAML
35 lines
2 KiB
YAML
|
---
|
||
|
|
# Jar Lid Archive backup: the database and the photo store, as ONE artefact,
|
||
|
|
# dumped and age-encrypted on the box itself. small-backups-box pulls it.
|
||
|
|
#
|
||
|
|
# Only `web` is stopped. It is the only writer to both the database and the
|
||
|
|
# photo store, so with it down both are quiescent and are captured at the same
|
||
|
|
# instant - no row points at a photo the tar lacks. db stays up for pg_dump.
|
||
|
|
#
|
||
|
|
# storage is deliberately NOT stopped, though an earlier version did: on this
|
||
|
|
# VM's contended HDD-backed disk SeaweedFS can take minutes to come back, and the
|
||
|
|
# first test run left the app down for 26 minutes waiting on it.
|
||
|
|
- name: Configure the Jar Lid Archive backup on its own host
|
||
|
|
hosts: jar_lid_archive
|
||
|
|
become: yes
|
||
|
|
|
||
|
|
tasks:
|
||
|
|
- name: Ensure Jar Lid Archive dumps itself, encrypted, on a timer
|
||
|
|
ansible.builtin.include_role:
|
||
|
|
name: backup_source
|
||
|
|
vars:
|
||
|
|
backup_source_name: "{{ jar_lid_archive_instance }}"
|
||
|
|
backup_source_description: "Jar Lid Archive ({{ jar_lid_archive_instance }})"
|
||
|
|
backup_source_dump_command: /usr/local/bin/jar-lid-archive-dump.sh
|
||
|
|
# Uncompressed: the bulk is JPEGs. See roles/jar_lid_archive/templates/dump.sh.j2.
|
||
|
|
backup_source_artifact_suffix: "tar.age"
|
||
|
|
backup_source_stop_command: "docker compose -f /opt/jar-lid-archive/docker-compose.yml stop web"
|
||
|
|
# `up -d --wait`, not `start`: it also repairs a db or storage that died
|
||
|
|
# meanwhile, and only returns once /health/ passes.
|
||
|
|
backup_source_start_command: "docker compose -f /opt/jar-lid-archive/docker-compose.yml up -d --wait --wait-timeout 300"
|
||
|
|
backup_source_retention_days: "{{ jar_lid_archive_backup_retention_days }}"
|
||
|
|
backup_source_on_calendar: "*-*-* 02:20:00"
|
||
|
|
# Reported to Gatus as backup-dump_<instance>.
|
||
|
|
backup_source_push_url: "https://{{ subdomains.gatus }}.{{ root_domain }}/api/v1/endpoints/backup-dump_{{ jar_lid_archive_instance }}/external"
|
||
|
|
backup_source_push_token: "{{ gatus_push_tokens[inventory_hostname] }}"
|