terraform: XMPP and Xray ports on services, no Hetzner backups

Open the ports of the XMPP server and Xray, which move to
asxpio-services, and close 25566 with Minecraft Fossils gone.

Turn off Hetzner's server backups on both hosts: restic now backs up
the data to object storage in two regions, and the server backups cost
20% of each server's price. Disabling them deletes the existing backup
images, so apply that part only after restic has a verified snapshot.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-12 20:57:52 +04:00
commit bc8cc75a19
2 changed files with 17 additions and 3 deletions

View file

@ -10,7 +10,9 @@ resource "hcloud_server" "ops" {
hcloud_ssh_key.deploy.id
]
backups = true
# Off: restic backs up both hosts to object storage (ansible role
# restic_backup) for less than the 20% of the server price this costs
backups = false
delete_protection = true
rebuild_protection = true
@ -56,7 +58,9 @@ resource "hcloud_server" "services" {
hcloud_ssh_key.deploy.id
]
backups = true
# Off: restic backs up both hosts to object storage (ansible role
# restic_backup) for less than the 20% of the server price this costs
backups = false
delete_protection = true
rebuild_protection = true