73 lines
2.1 KiB
Ruby
73 lines
2.1 KiB
Ruby
#
|
|
# Cookbook Name:: backup
|
|
# Recipe:: default
|
|
#
|
|
|
|
apt_package 'postgresql-client-12'
|
|
build_essential 'backup gem'
|
|
package ['libxml2-dev', 'libcurl4-gnutls-dev']
|
|
|
|
# Don't try to install packages on older Ubuntu, the repositories are 404
|
|
package ["ruby", "ruby-dev", "zlib1g-dev"] if node[:platform_version].to_f >= 16.04
|
|
|
|
gem_package 'backup' do
|
|
version '5.0.0.beta.3'
|
|
end
|
|
|
|
smtp_credentials = Chef::EncryptedDataBagItem.load('credentials', 'smtp')
|
|
|
|
backup_data = Chef::EncryptedDataBagItem.load('credentials', 'backup')
|
|
backup_dir = node["backup"]["dir"]
|
|
directory backup_dir
|
|
directory "#{backup_dir}/models"
|
|
directory "#{backup_dir}/log"
|
|
|
|
template "#{backup_dir}/config.rb" do
|
|
source "config.rb.erb"
|
|
mode 0640
|
|
sensitive true
|
|
variables s3_access_key_id: backup_data["s3_access_key_id"],
|
|
s3_secret_access_key: backup_data["s3_secret_access_key"],
|
|
s3_region: backup_data["s3_region"],
|
|
encryption_password: backup_data["encryption_password"],
|
|
mail_from: "backups@kosmos.org",
|
|
mail_to: "ops@5apps.com",
|
|
mail_address: 'smtp.mailgun.org',
|
|
mail_domain: 'kosmos.org',
|
|
mail_user_name: smtp_credentials["user_name"],
|
|
mail_password: smtp_credentials["password"]
|
|
end
|
|
|
|
template "#{backup_dir}/models/default.rb" do
|
|
source "backup.rb.erb"
|
|
mode 0640
|
|
end
|
|
|
|
cron "default backup model" do
|
|
hour node['backup']['cron']['hour']
|
|
minute node['backup']['cron']['minute']
|
|
command "/usr/bin/env HOME=/root /bin/sh -l -c '/usr/local/bin/backup perform -t default --root-path #{backup_dir} >> /var/log/backup.log 2>&1'"
|
|
end
|
|
|
|
include_recipe 'logrotate'
|
|
|
|
# Write the credentials file to allow dumps without password for the root
|
|
# user (https://dev.mysql.com/doc/refman/5.7/en/option-files.html)
|
|
file "/root/.my.cnf" do
|
|
mode "600"
|
|
content lazy { <<-EOF
|
|
[client]
|
|
user=#{node["backup"]["mysql"]["username"]}
|
|
password=#{node["backup"]["mysql"]["password"]}
|
|
EOF
|
|
}
|
|
not_if { node["backup"]["mysql"]["password"].nil? }
|
|
end
|
|
|
|
logrotate_app 'backup' do
|
|
path '/var/log/backup.log'
|
|
frequency 'daily'
|
|
rotate 10
|
|
create '640 root root'
|
|
end
|