feat(forgejo): 2-tier backups - local 2nd disk + off-box NFS to hp-victus #115

Merged
kblack0610 merged 1 commit from feat/forgejo-backup-offbox into master 2026-07-10 02:11:45 +00:00
Owner

Completes backup hardening after the 2026-07-09 outage. Copy 2 = asus 2nd disk (off the cluster root disk); Copy 3 = off-box NFS to hp-victus (new decoupled CronJob + ansible nfs-backup-target role). hp-victus pinned at .243. Verified: role applies clean, asus mounts+writes the export.

Completes backup hardening after the 2026-07-09 outage. Copy 2 = asus 2nd disk (off the cluster root disk); Copy 3 = off-box NFS to hp-victus (new decoupled CronJob + ansible nfs-backup-target role). hp-victus pinned at .243. Verified: role applies clean, asus mounts+writes the export.
Completes the backup hardening after the 2026-07-09 DiskPressure outage.

Layout (3-2-1-ish):
- Copy 1 (live): forgejo-data PVC on asus-laptop.
- Copy 2 (local, fast restore): forgejo-backup now writes to asus-laptop's
  SECOND disk (/mnt/backups on nvme1n1p2, @backups subvol), OFF the k3s root
  disk that filled and evicted the cluster. hostPath type: Directory (not
  DirectoryOrCreate) so a failed 2nd-disk mount fails fast instead of silently
  re-filling the root disk.
- Copy 3 (off-box, different machine): new forgejo-backup-offbox CronJob copies
  the newest full+db to hp-victus over NFS (keep 4). Decoupled from the primary
  job (separate schedule, nodeSelector asus-laptop) so an hp-victus/NFS outage
  never fails the local backup.

Infra:
- ansible role nfs-backup-target: hp-victus exports /srv/backups over NFS to the
  LAN (bound in site.yml). Verified: asus mounts + writes the export.
- devices.yaml: pin hp-victus at .243 (its current lease) so the NFS server IP
  can't drift on a DHCP renewal.

Verified: NFS role applies clean (failed=0), export live on :2049, asus-laptop
mounts and writes it.
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
kblack0610/home-config!115
No description provided.