Sergei Poljanski
2e9d4649a0
restic writes both regions itself, but the ad-hoc backups under asxpio-ops/, the Terraform state and the k8s state only ever went to hel1. Sync each hel1 bucket into its fsn1 twin every morning from asxpio-services, with rclone pinned like everything else. restic/ is excluded, so the independent fsn1 restic repositories are never touched. A run that would delete more than 1000 objects stops and mails, so a mistake on the hel1 side cannot empty the replica the next morning. The first dry run copied 23 objects and deleted none. Assisted-by: Claude:opus-5-5
13 lines
572 B
Django/Jinja
13 lines
572 B
Django/Jinja
RCLONE_CONFIG_HEL1_TYPE=s3
|
|
RCLONE_CONFIG_HEL1_PROVIDER=Other
|
|
RCLONE_CONFIG_HEL1_ENDPOINT=https://hel1.your-objectstorage.com
|
|
RCLONE_CONFIG_HEL1_REGION=hel1
|
|
RCLONE_CONFIG_HEL1_ACCESS_KEY_ID={{ s3_access_key }}
|
|
RCLONE_CONFIG_HEL1_SECRET_ACCESS_KEY={{ s3_secret_key }}
|
|
RCLONE_CONFIG_FSN1_TYPE=s3
|
|
RCLONE_CONFIG_FSN1_PROVIDER=Other
|
|
RCLONE_CONFIG_FSN1_ENDPOINT=https://fsn1.your-objectstorage.com
|
|
RCLONE_CONFIG_FSN1_REGION=fsn1
|
|
RCLONE_CONFIG_FSN1_ACCESS_KEY_ID={{ s3_access_key }}
|
|
RCLONE_CONFIG_FSN1_SECRET_ACCESS_KEY={{ s3_secret_key }}
|
|
RCLONE_CONFIG_FSN1_NO_CHECK_BUCKET=true
|