Deployment on Nomad

This commit is contained in:
Quentin 2022-04-15 14:24:41 +02:00
parent 8cf1b0c3e4
commit 83745f737a
6 changed files with 64 additions and 4 deletions

View file

@ -19,15 +19,16 @@ in
cat > backup-psql <<EOF cat > backup-psql <<EOF
#!${pkgs.bash}/bin/bash #!${pkgs.bash}/bin/bash
export PYTHONPATH=${python-with-my-packages}/${python-with-my-packages.sitePackages} export PYTHONPATH=${python-with-my-packages}/${python-with-my-packages.sitePackages}
python3 $out/lib/backup-psql.py ${python-with-my-packages}/bin/python3 $out/lib/backup-psql.py
EOF EOF
chmod +x backup-psql chmod +x backup-psql
''; '';
installPhase = '' installPhase = ''
mkdir -p $out/{bin,lib} mkdir -p $out/{bin,lib}
cp *.py $out/lib/backup-psql.py cp *.py $out/lib/backup-psql.py
cp backup-psql $out/bin/backup-sql cp backup-psql $out/bin/backup-psql
''; '';
} }

View file

@ -0,0 +1,55 @@
job "backup_weekly" {
datacenters = ["dc1"]
type = "batch"
priority = "60"
periodic {
cron = "@weekly"
// Do not allow overlapping runs.
prohibit_overlap = true
}
group "backup-psql" {
task "main" {
driver = "docker"
config {
image = "superboum/backup-psql-docker:kldrj9xlbda1s4v963jhpgardg6qczgl"
volumes = [
// Mount a cache on the hard disk to avoid filling the SSD
"/mnt/storage/tmp_bckp_psql:/mnt/cache"
]
}
template {
data = <<EOH
CACHE_DIR=/mnt/cache
AWS_BUCKET=backups-pgbasebackup
AWS_ENDPOINT=s3.deuxfleurs.shirokumo.net
AWS_ACCESS_KEY_ID={{ key "secrets/backup/psql/aws_access_key_id" }}
AWS_SECRET_ACCESS_KEY={{ key "secrets/backup/psql/aws_secret_access_key" }}
CRYPT_PUBLIC_KEY={{ key "secrets/backup/psql/crypt_public_key" }}
PSQL_HOST=psql-proxy.service.2.cluster.deuxfleurs.fr
PSQL_USER={{ key "secrets/postgres/keeper/pg_repl_username" }}
PGPASSWORD={{ key "secrets/postgres/keeper/pg_repl_pwd" }}
EOH
destination = "secrets/env_vars"
env = true
}
resources {
cpu = 200
memory = 200
}
restart {
attempts = 2
interval = "30m"
delay = "15s"
mode = "fail"
}
}
}
}

View file

@ -0,0 +1 @@
USER Minio access key

View file

@ -0,0 +1 @@
USER Minio secret key

View file

@ -0,0 +1 @@
USER a private key to decript backups from age

View file

@ -0,0 +1 @@
USER A public key to encypt backups with age