turtlebasket
/
michaelnet
mirror of https://github.com/turtlebasket/michaelnet
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

backup host + tweaks

master
michael 2023-06-25 09:25:32 -07:00
parent 0a786395ec
commit f0f9ab7800
3 changed files with 66 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
README.md
View File

@ -1,18 +1,14 @@
# Michael's Homelab
## Hosts & Services
## Hosts
### Cuddlefish
| Host | OS | Services |
| :--- | :--- | :------- |
| Cuddlefish | ![CentOS](https://img.shields.io/badge/centos%207-002260?style=for-the-badge&logo=centos&logoColor=F0F0F0) | Gitea |
| Rocktiplex | ![Rocky Linux](https://img.shields.io/badge/-Rocky%20Linux%209-%2310B981?style=for-the-badge&logo=rockylinux&logoColor=white) | Fathom |
![CentOS](https://img.shields.io/badge/centos%207-002260?style=for-the-badge&logo=centos&logoColor=F0F0F0)
- `git.michaellisano.com`
### Rocktiplex
![Rocky Linux](https://img.shields.io/badge/-Rocky%20Linux%209-%2310B981?style=for-the-badge&logo=rockylinux&logoColor=white)
- `analytics.michaellisano.com`
<!-- To be created -->
<!-- | Cloud8 | ![Rocky Linux](https://img.shields.io/badge/-Rocky%20Linux%209-%2310B981?style=for-the-badge&logo=rockylinux&logoColor=white) | NextCloud | -->
## Dockerized Cloudflared Notes
@ -34,3 +30,23 @@ Then in this case the name of the target service is `gitea-server`, and (per Doc
https://git.michaellisano.com -> http://gitea-server:3000
```
## Backup Decryption Notes
Everything is encrypted with [age](https://github.com/FiloSottile/age).
All keys are generated using age-keygen and stored in a text file, e.g.
**backup-key.txt**
```
# created: 2023-06-24T18:01:36-07:00
# public key: age12345...
AGE-SECRET-KEY-xyz123...
```
Decrypting a file:
```
age -d -i backup-key.txt -o NAME.tar.gz NAME.tar.gz.enc
```

24
backup/README.md Normal file
View File

@ -0,0 +1,24 @@
# Generic Backup Host
## Filenames
Container volume backups are of the format:
```
gitea-data-2023-06-17_050002.tar.gz.enc
^ ^ ^
| | Backups are encrypted tarballs
| |
| ISO Datetime separated by _
|
Container volume name (*-data)
```
## Matching
Regex to match backups that are *not* from the first of every month:
```
.*-data-\d{4}-\d{2}-([^0][0-9]|[0-9][^1])_.*
```

15
backup/prune.sh Normal file
View File

@ -0,0 +1,15 @@
#!/usr/bin/bash
# Prunes container data folders monthly on backup host
# - Regex has been tested and works
# - Script is not yet tested
ARCHIVES=$(ls | grep -E "[0-9A-Za-z]+-data-\d{4}-\d{2}-([^0][0-9]|[0-9][^1])_.*")
for archive in $ARCHIVES; do
if [ -d $archive ]; then
echo "Removing $archive"
rm -f $archive
fi
done