iac/ansible/roles/s3_replicate/templates/s3-replicate.timer.j2
Sergei Poljanski 2e9d4649a0 ansible: daily replica of the hel1 buckets into fsn1
restic writes both regions itself, but the ad-hoc backups under
asxpio-ops/, the Terraform state and the k8s state only ever went to
hel1. Sync each hel1 bucket into its fsn1 twin every morning from
asxpio-services, with rclone pinned like everything else.

restic/ is excluded, so the independent fsn1 restic repositories are
never touched. A run that would delete more than 1000 objects stops and
mails, so a mistake on the hel1 side cannot empty the replica the next
morning. The first dry run copied 23 objects and deleted none.

Assisted-by: Claude:opus-5-5
2026-11-12 22:52:13 +04:00

10 lines
174 B
Django/Jinja

[Unit]
Description=Daily hel1 -> fsn1 bucket replica
[Timer]
OnCalendar={{ s3_replicate_schedule }}
RandomizedDelaySec=15m
Persistent=true
[Install]
WantedBy=timers.target