Files
felhom.eu/scripts/hub-db-backup/felhom-hub-db-backup.service
T
admin 1707c928a9
gates / gates (push) Successful in 5m4s
dooplex-offsite: nightly encrypted copy of Gitea + DooPlex secrets to ep0, restore test, failure mail (R-232 b/h)
Part A plan + readings, Part E read-backs (R-861 a, R-518) in audits/dooplex-survival-2026-10-09/.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-09 10:08:31 +02:00

21 lines
724 B
Desktop File

# Versioned in felhom.eu/scripts/hub-db-backup/ (R-231); installed by install.sh. Runbook: RUNBOOK-hub-db-offsite-backup.md.
[Unit]
Description=Felhom: push the hub DB snapshot to ep0 (R-173)
Wants=network-online.target felhom-ep0-pbs-tunnel.service
After=network-online.target felhom-ep0-pbs-tunnel.service
OnFailure=felhom-backup-failmail@%n.service
[Service]
Type=oneshot
ExecStart=/usr/local/sbin/felhom-hub-db-backup
Environment=HOME=/var/lib/felhom-hub-backup KUBECONFIG=/etc/rancher/k3s/k3s.yaml
UMask=0077
TimeoutStartSec=45min
Nice=10
IOSchedulingClass=idle
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/var/lib/felhom-hub-backup /var/lib/node_exporter/textfile_collector
NoNewPrivileges=yes