asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ansible: daily replica of the hel1 buckets into fsn1

Browse source 
restic writes both regions itself, but the ad-hoc backups under
asxpio-ops/, the Terraform state and the k8s state only ever went to
hel1. Sync each hel1 bucket into its fsn1 twin every morning from
asxpio-services, with rclone pinned like everything else.

restic/ is excluded, so the independent fsn1 restic repositories are
never touched. A run that would delete more than 1000 objects stops and
mails, so a mistake on the hel1 side cannot empty the replica the next
morning. The first dry run copied 23 objects and deleted none.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-12 22:52:13 +04:00
commit 2e9d4649a0
8 changed files with 117 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
ansible/roles/s3_replicate/templates/env.j2 Normal file
View file

@ -0,0 +1,13 @@
RCLONE_CONFIG_HEL1_TYPE=s3
RCLONE_CONFIG_HEL1_PROVIDER=Other
RCLONE_CONFIG_HEL1_ENDPOINT=https://hel1.your-objectstorage.com
RCLONE_CONFIG_HEL1_REGION=hel1
RCLONE_CONFIG_HEL1_ACCESS_KEY_ID={{ s3_access_key }}
RCLONE_CONFIG_HEL1_SECRET_ACCESS_KEY={{ s3_secret_key }}
RCLONE_CONFIG_FSN1_TYPE=s3
RCLONE_CONFIG_FSN1_PROVIDER=Other
RCLONE_CONFIG_FSN1_ENDPOINT=https://fsn1.your-objectstorage.com
RCLONE_CONFIG_FSN1_REGION=fsn1
RCLONE_CONFIG_FSN1_ACCESS_KEY_ID={{ s3_access_key }}
RCLONE_CONFIG_FSN1_SECRET_ACCESS_KEY={{ s3_secret_key }}
RCLONE_CONFIG_FSN1_NO_CHECK_BUCKET=true