infra/roles/backup/defaults/main.yml at 0496e9ab61e04bab58b603195e3ffa0a09e071cc - jack/infra - Forgejo: Beyond coding. We Forge.

jack/infra

jack fc6b1c0cec

CI/CD / syntax-check (push) Successful in 39s

Details

CI/CD / deploy (push) Has been cancelled

Details

feat: Timeweb S3 offsite backup uploads

- Add vault_s3_access_key / vault_s3_secret_key to Ansible Vault
- Expose via s3_access_key / s3_secret_key in all/main.yml
- Add s3_endpoint + s3_bucket to backup role defaults
- Install awscli via apt in backup role tasks
- Extend backup.sh.j2: upload *.gz to S3 after local backup,
  prune S3 objects older than backup_retention_days

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-22 03:58:58 +07:00

8 lines

171 B

YAML

Raw Blame History

 ---
 backup_dir: /opt/backups
 backup_retention_days: 7
 backup_user: deploy
 # Timeweb S3 offsite backups
 s3_endpoint: "https://s3.timeweb.cloud"
 s3_bucket: "visual-backup"