learn.halkyon.eu dumps its database every hour (people's files are in it too) and restic stores the dump encrypted in a Hetzner Storage Box, keeping 24 hourly, 7 daily, 4 weekly and 3 monthly snapshots. The box's own snapshots, removable only in Hetzner's Console, protect the backups from a taken-over server. A systemd timer runs it as deploy; once a day it also prunes and checks the repository. Failures go to the journal. Hourly, because a restore costs people who started after the backup what their device held: the app no longer finds its session and starts anew. deploy/backups.md describes the setup, the restore and what a restore loses; both were rehearsed on the local Compose stack. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
13 lines
458 B
SYSTEMD
13 lines
458 B
SYSTEMD
# Starts halkyon-backup.service at the start of every hour; the run at 03:00,
|
|
# sahaquiel's time (Europe/Berlin), also prunes and checks, done before the security
|
|
# updates may reboot at 04:00. A run missed while sahaquiel was off happens as soon as
|
|
# it is back. Installed as /etc/systemd/system/halkyon-backup.timer.
|
|
[Unit]
|
|
Description=Hourly off-site backup of learn.halkyon.eu
|
|
|
|
[Timer]
|
|
OnCalendar=hourly
|
|
Persistent=true
|
|
|
|
[Install]
|
|
WantedBy=timers.target
|