64 lines
2.1 KiB
YAML
64 lines
2.1 KiB
YAML
|
# Galera Database Backup
|
||
|
|
# Dumps the database and uploads to Hetzner S3
|
||
|
|
#
|
||
|
|
# Usage:
|
||
|
|
# core deploy ansible playbooks/galera-backup.yml -i playbooks/inventory.yml -l de
|
||
|
|
---
|
||
|
|
- name: Backup Galera Database to S3
|
||
|
|
hosts: app_servers
|
||
|
|
become: true
|
||
|
|
vars:
|
||
|
|
db_root_password: "{{ lookup('env', 'DB_ROOT_PASSWORD') }}"
|
||
|
|
s3_endpoint: "{{ lookup('env', 'HETZNER_S3_ENDPOINT') | default('fsn1.your-objectstorage.com', true) }}"
|
||
|
|
s3_bucket: "{{ lookup('env', 'HETZNER_S3_BUCKET') | default('hostuk', true) }}"
|
||
|
|
s3_access_key: "{{ lookup('env', 'HETZNER_S3_ACCESS_KEY') }}"
|
||
|
|
s3_secret_key: "{{ lookup('env', 'HETZNER_S3_SECRET_KEY') }}"
|
||
|
|
backup_prefix: backup/galera
|
||
|
|
backup_retain_days: 30
|
||
|
|
|
||
|
|
tasks:
|
||
|
|
- name: Create backup directory
|
||
|
|
file:
|
||
|
|
path: /opt/backup
|
||
|
|
state: directory
|
||
|
|
mode: "0700"
|
||
|
|
|
||
|
|
- name: Dump database
|
||
|
|
shell: |
|
||
|
|
TIMESTAMP=$(date +%Y%m%d-%H%M%S)
|
||
|
|
DUMP_FILE="/opt/backup/hostuk-${TIMESTAMP}-{{ galera_node_name }}.sql.gz"
|
||
|
|
docker exec galera mariadb-dump \
|
||
|
|
-u root -p{{ db_root_password }} \
|
||
|
|
--all-databases \
|
||
|
|
--single-transaction \
|
||
|
|
--routines \
|
||
|
|
--triggers \
|
||
|
|
--events \
|
||
|
|
| gzip > "${DUMP_FILE}"
|
||
|
|
echo "${DUMP_FILE}"
|
||
|
|
register: dump_result
|
||
|
|
|
||
|
|
- name: Install s3cmd if missing
|
||
|
|
shell: |
|
||
|
|
which s3cmd 2>/dev/null || pip3 install s3cmd
|
||
|
|
changed_when: false
|
||
|
|
|
||
|
|
- name: Upload to S3
|
||
|
|
shell: |
|
||
|
|
s3cmd put {{ dump_result.stdout | trim }} \
|
||
|
|
s3://{{ s3_bucket }}/{{ backup_prefix }}/$(basename {{ dump_result.stdout | trim }}) \
|
||
|
|
--host={{ s3_endpoint }} \
|
||
|
|
--host-bucket='%(bucket)s.{{ s3_endpoint }}' \
|
||
|
|
--access_key={{ s3_access_key }} \
|
||
|
|
--secret_key={{ s3_secret_key }}
|
||
|
|
when: s3_access_key != ""
|
||
|
|
|
||
|
|
- name: Clean old local backups
|
||
|
|
shell: |
|
||
|
|
find /opt/backup -name "hostuk-*.sql.gz" -mtime +{{ backup_retain_days }} -delete
|
||
|
|
changed_when: false
|
||
|
|
|
||
|
|
- name: Show backup result
|
||
|
|
debug:
|
||
|
|
msg: "Backup completed: {{ dump_result.stdout | trim }}"
|