diff --git a/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml b/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml index b025e77..864cd5b 100644 --- a/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml +++ b/.gitea/workflows/gitea_tar-valon_ansible_deploy.yml @@ -130,7 +130,7 @@ jobs: uses: dawidd6/action-ansible-playbook@v3 with: directory: . - playbook: playbooks/tar-valon_config_deploy.yml + playbook: tar-valon_config_deploy.yml vault_password: ${{ secrets.ANSIBLE_VAULT_PASSWORD }} key: ${{ secrets.ANSIBLE_PRIVATE_KEY }} requirements: collections/requirements.yml diff --git a/app-configs/rinoa/mgob/config/default_mbd_bkup.yaml.j2 b/app-configs/rinoa/mgob/config/default_mbd_bkup.yaml.j2 new file mode 100644 index 0000000..f5fa9ef --- /dev/null +++ b/app-configs/rinoa/mgob/config/default_mbd_bkup.yaml.j2 @@ -0,0 +1,32 @@ +{% set vault_addr = 'https://vault.trez.wtf' %} +{% set secrets_path = 'rinoa-docker/env' %} +scheduler: + cron: "45 23 * * *" # run every day at 6:00 and 18:00 UTC + retention: 14 # Retains 14 local backups + timeout: 60 # Operation timeout: 60 minutes +target: + uri: mongodb://root:{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['MONGO_INITDB_ROOT_PASSWORD'] }}@mongodb:27017/admin?replicaSet=rinoa + noGzip: false # Disable gzip compression (false means compression is enabled) + +retry: + attempts: 3 # number of retries + backoffFactor: 60 # backoff factor * (2 ^ attemptCount) seconds + +validation: + database: + host: "mongodb" + port: 27017 + noGzip: false + database: rocketchat # Database name for restore operation + +# Email notifications (optional) +smtp: + server: postal-stmp + port: 25 + username: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['POSTAL_SMTP_AUTH_USER'] }} + password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['POSTAL_SMTP_AUTH_PASSWORD'] }} + from: noreply@trez.wtf + to: + - charish.patel@trez.wtf + # 'true' to notify only on failures + warnOnly: false \ No newline at end of file