Sergei Poljanski
2e9d4649a0
restic writes both regions itself, but the ad-hoc backups under asxpio-ops/, the Terraform state and the k8s state only ever went to hel1. Sync each hel1 bucket into its fsn1 twin every morning from asxpio-services, with rclone pinned like everything else. restic/ is excluded, so the independent fsn1 restic repositories are never touched. A run that would delete more than 1000 objects stops and mails, so a mistake on the hel1 side cannot empty the replica the next morning. The first dry run copied 23 objects and deleted none. Assisted-by: Claude:opus-5-5
11 lines
279 B
Django/Jinja
11 lines
279 B
Django/Jinja
[Unit]
|
|
Description=Replicate the hel1 buckets to fsn1
|
|
Wants=network-online.target
|
|
After=network-online.target docker.service
|
|
# Mailer from the restic_backup role
|
|
OnFailure=restic-alert@%n.service
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/usr/local/sbin/s3-replicate
|
|
TimeoutStartSec=12h
|