aboutsummaryrefslogtreecommitdiff
path: root/app/cryptpad
diff options
context:
space:
mode:
authorQuentin Dufour <quentin@deuxfleurs.fr>2022-05-10 15:58:09 +0200
committerQuentin Dufour <quentin@deuxfleurs.fr>2022-05-10 15:58:09 +0200
commit52f14f9da2236caf999094d666f3fdb9211bdff0 (patch)
tree018455c2150e2b1bbb3709dd2a8b7be23364457a /app/cryptpad
parent8cd2f72926293a8bca1b42fe7bccb2b9e61740d1 (diff)
downloadnixcfg-52f14f9da2236caf999094d666f3fdb9211bdff0.tar.gz
nixcfg-52f14f9da2236caf999094d666f3fdb9211bdff0.zip
Backup Cryptpad
Diffstat (limited to 'app/cryptpad')
-rw-r--r--app/cryptpad/deploy/backup.hcl57
-rw-r--r--app/cryptpad/secrets/cryptpad_backup/backup_aws_access_key_id1
-rw-r--r--app/cryptpad/secrets/cryptpad_backup/backup_aws_secret_access_key1
-rw-r--r--app/cryptpad/secrets/cryptpad_backup/backup_restic_password1
-rw-r--r--app/cryptpad/secrets/cryptpad_backup/backup_restic_repository1
5 files changed, 61 insertions, 0 deletions
diff --git a/app/cryptpad/deploy/backup.hcl b/app/cryptpad/deploy/backup.hcl
new file mode 100644
index 0000000..99dee2f
--- /dev/null
+++ b/app/cryptpad/deploy/backup.hcl
@@ -0,0 +1,57 @@
+job "cryptpad_backup" {
+ datacenters = ["neptune"]
+ type = "batch"
+
+ priority = "60"
+
+ periodic {
+ cron = "@daily"
+ // Do not allow overlapping runs.
+ prohibit_overlap = true
+ }
+
+ group "backup-cryptpad" {
+ constraint {
+ attribute = "${attr.unique.hostname}"
+ operator = "="
+ value = "courgette"
+ }
+
+ task "main" {
+ driver = "docker"
+
+ config {
+ image = "restic/restic:0.12.1"
+ entrypoint = [ "/bin/sh", "-c" ]
+ args = [ "restic backup /cryptpad && restic forget --keep-within 1m1d --keep-within-weekly 3m --keep-within-monthly 1y && restic prune --max-unused 50% --max-repack-size 2G && restic check" ]
+ volumes = [
+ "/mnt/storage/cryptpad:/cryptpad"
+ ]
+ }
+
+ template {
+ data = <<EOH
+AWS_ACCESS_KEY_ID={{ key "secrets/cryptpad_backup/backup_aws_access_key_id" }}
+AWS_SECRET_ACCESS_KEY={{ key "secrets/cryptpad_backup/backup_aws_secret_access_key" }}
+RESTIC_REPOSITORY={{ key "secrets/cryptpad_backup/backup_restic_repository" }}
+RESTIC_PASSWORD={{ key "secrets/cryptpad_backup/backup_restic_password" }}
+EOH
+
+ destination = "secrets/env_vars"
+ env = true
+ }
+
+ resources {
+ cpu = 500
+ memory = 200
+ }
+
+ restart {
+ attempts = 2
+ interval = "30m"
+ delay = "15s"
+ mode = "fail"
+ }
+ }
+ }
+}
diff --git a/app/cryptpad/secrets/cryptpad_backup/backup_aws_access_key_id b/app/cryptpad/secrets/cryptpad_backup/backup_aws_access_key_id
new file mode 100644
index 0000000..9235e53
--- /dev/null
+++ b/app/cryptpad/secrets/cryptpad_backup/backup_aws_access_key_id
@@ -0,0 +1 @@
+USER Backup AWS access key ID
diff --git a/app/cryptpad/secrets/cryptpad_backup/backup_aws_secret_access_key b/app/cryptpad/secrets/cryptpad_backup/backup_aws_secret_access_key
new file mode 100644
index 0000000..f34677e
--- /dev/null
+++ b/app/cryptpad/secrets/cryptpad_backup/backup_aws_secret_access_key
@@ -0,0 +1 @@
+USER Backup AWS secret access key
diff --git a/app/cryptpad/secrets/cryptpad_backup/backup_restic_password b/app/cryptpad/secrets/cryptpad_backup/backup_restic_password
new file mode 100644
index 0000000..fbaa5fa
--- /dev/null
+++ b/app/cryptpad/secrets/cryptpad_backup/backup_restic_password
@@ -0,0 +1 @@
+USER Restic password to encrypt backups
diff --git a/app/cryptpad/secrets/cryptpad_backup/backup_restic_repository b/app/cryptpad/secrets/cryptpad_backup/backup_restic_repository
new file mode 100644
index 0000000..3f6cb93
--- /dev/null
+++ b/app/cryptpad/secrets/cryptpad_backup/backup_restic_repository
@@ -0,0 +1 @@
+USER Restic repository, eg. s3:https://s3.garage.tld