aboutsummaryrefslogtreecommitdiff
path: root/app/backup/deploy/backup.hcl
diff options
context:
space:
mode:
authorAlex Auvolat <alex@adnab.me>2021-01-16 17:07:01 +0100
committerAlex Auvolat <alex@adnab.me>2021-01-16 17:07:01 +0100
commitc74dc92febd1841c8ea5ff31caab0f941d57527d (patch)
treed05a203d95cac988952799667ec43c327a5d9038 /app/backup/deploy/backup.hcl
parent0c4ee40e01c95d7bf73236cbead5cc261f67eb9d (diff)
downloadinfrastructure-c74dc92febd1841c8ea5ff31caab0f941d57527d.tar.gz
infrastructure-c74dc92febd1841c8ea5ff31caab0f941d57527d.zip
Proposal: reorganize app/ folder by modules
Diffstat (limited to 'app/backup/deploy/backup.hcl')
-rw-r--r--app/backup/deploy/backup.hcl67
1 files changed, 67 insertions, 0 deletions
diff --git a/app/backup/deploy/backup.hcl b/app/backup/deploy/backup.hcl
new file mode 100644
index 0000000..08fd923
--- /dev/null
+++ b/app/backup/deploy/backup.hcl
@@ -0,0 +1,67 @@
+job "backup_periodic" {
+ datacenters = ["dc1"]
+
+ type = "batch"
+
+ periodic {
+ // Launch every hour
+ cron = "0 * * * * *"
+
+ // Do not allow overlapping runs.
+ prohibit_overlap = true
+ }
+
+ task "backup-consul" {
+ driver = "docker"
+
+ config {
+ image = "lxpz/backup_consul:12"
+ volumes = [
+ "secrets/id_ed25519:/root/.ssh/id_ed25519",
+ "secrets/id_ed25519.pub:/root/.ssh/id_ed25519.pub",
+ "secrets/known_hosts:/root/.ssh/known_hosts"
+ ]
+ network_mode = "host"
+ }
+
+ env {
+ CONSUL_HTTP_ADDR = "http://consul.service.2.cluster.deuxfleurs.fr:8500"
+ }
+
+ template {
+ data = <<EOH
+TARGET_SSH_USER={{ key "secrets/backup/target_ssh_user" }}
+TARGET_SSH_PORT={{ key "secrets/backup/target_ssh_port" }}
+TARGET_SSH_HOST={{ key "secrets/backup/target_ssh_host" }}
+TARGET_SSH_DIR={{ key "secrets/backup/target_ssh_dir" }}
+EOH
+
+ destination = "secrets/env_vars"
+ env = true
+ }
+
+ template {
+ data = "{{ key \"secrets/backup/id_ed25519\" }}"
+ destination = "secrets/id_ed25519"
+ }
+ template {
+ data = "{{ key \"secrets/backup/id_ed25519.pub\" }}"
+ destination = "secrets/id_ed25519.pub"
+ }
+ template {
+ data = "{{ key \"secrets/backup/target_ssh_fingerprint\" }}"
+ destination = "secrets/known_hosts"
+ }
+
+ resources {
+ memory = 200
+ }
+
+ restart {
+ attempts = 2
+ interval = "30m"
+ delay = "15s"
+ mode = "fail"
+ }
+ }
+}