Backups

[anbraten]

We should do "professional" backups.

Maybe sth like https://github.com/offen/docker-volume-backup might be sufficient.

[xoxys]

@anbraten @qwerty287 Would like to take care of it. What do you think about creating a Hetzner S3 bucket for the backups?

[xoxys]

If you create a bucket and add the credentials to the ansible vault file, I can take care of the rest.

[qwerty287]

@xoxys see #186. I thought it's ok to not put the URL into the vault, but use it directly, is that correct?

[xoxys]

Yes thats perfectly fine.

[6543]

should we use https://restic.net/ or https://www.borgbackup.org/ to have encrypted and deduplicated backups?

restic has support for s3 and more:
https://restic.readthedocs.io/en/stable/030_preparing_a_new_repo.html#s3-compatible-storage

borgbackup has no s3 support but ssh support:
https://borgbackup.readthedocs.io/en/stable/quickstart.html#remote-repositories

borg supports mounting a backup restic dont

both support encryption, snapshots, compression,...

so for our usecase restic with s3 support seems better ...

[xoxys]

My plan was to use restic.

borg supports mounting a backup restic dont

restic supports mounting snapshots as well

---

If you want to work on this issue, here are some recommendations:

• combine restic with https://github.com/creativeprojects/resticprofile to avoid scripting of backup jobs
• use systemd timers - no cronjobs
• keep in mind to exec psqldump or equivalents for DBs and backup the dumps instead of the data dir
• sync pre-backup jobs and backup jobs by systemd references