948b0baf44
If we don't have a POST_COMMANDS_INCOMPLETE then POST_COMMANDS_FAILURE will trigger. This may be a bit misleading as we are doing backups of live systems and it is almost expected that a file will change or disappear during backup. Instead, we report backup as "up" with a message that the backup was incomplete.
52 lines
1.7 KiB
Django/Jinja
52 lines
1.7 KiB
Django/Jinja
# vim: ft=yaml.docker-compose
|
|
version: "3.8"
|
|
|
|
services:
|
|
backup:
|
|
image: mazzolino/restic:{{ services.restic.version }}
|
|
restart: always
|
|
hostname: {{ inventory_hostname_short }}
|
|
domainname: {{ inventory_hostname }}
|
|
environment:
|
|
RUN_ON_STARTUP: false
|
|
BACKUP_CRON: "0 30 3 * * *"
|
|
RESTIC_REPOSITORY: sftp:{{ services.restic.remote_user }}@{{ services.restic.remote_domain }}:{{ services.restic.repository }}
|
|
RESTIC_PASSWORD: "{{ restic_secrets.repository_password }}"
|
|
RESTIC_BACKUP_SOURCES: /mnt/volumes
|
|
RESTIC_BACKUP_ARGS: >-
|
|
--tag datacoop-volumes
|
|
--exclude '*.tmp'
|
|
--exclude '/mnt/volumes/mastodon/mastodon_data/cache/'
|
|
--exclude '/mnt/volumes/restic/'
|
|
--verbose
|
|
RESTIC_FORGET_ARGS: >-
|
|
--keep-last 10
|
|
--keep-daily 7
|
|
--keep-weekly 5
|
|
--keep-monthly 12
|
|
TZ: Europe/Copenhagen
|
|
POST_COMMANDS_FAILURE: /run/libexec/failure.sh
|
|
POST_COMMANDS_SUCCESS: /run/libexec/success.sh
|
|
{# If we don't have INCOMPLETE they will trigger FAILURE #}
|
|
POST_COMMANDS_INCOMPLETE: /run/libexec/incomplete.sh
|
|
volumes:
|
|
- "./ssh:/run/secrets/.ssh:ro"
|
|
- "./scripts:/run/libexec:ro"
|
|
- "/docker-volumes:/mnt/volumes:ro"
|
|
networks:
|
|
- postfix
|
|
|
|
prune:
|
|
image: mazzolino/restic:{{ services.restic.version }}
|
|
environment:
|
|
RUN_ON_STARTUP: false
|
|
PRUNE_CRON: "0 30 4 * * *"
|
|
RESTIC_REPOSITORY: sftp:{{ services.restic.remote_user }}@{{ services.restic.remote_domain }}:{{ services.restic.repository }}
|
|
RESTIC_PASSWORD: "{{ restic_secrets.repository_password }}"
|
|
TZ: Europe/copenhagen
|
|
volumes:
|
|
- "./ssh:/run/secrets/.ssh:ro"
|
|
|
|
networks:
|
|
postfix:
|
|
external: true
|