Ilia Denisov
e922f5f3b9
CI / changes (pull_request) Successful in 4s
CI / unit (pull_request) Successful in 12s
CI / integration (pull_request) Successful in 24s
CI / ui (pull_request) Successful in 1m9s
CI / conformance (pull_request) Successful in 10s
CI / gate (pull_request) Successful in 0s
CI / deploy (pull_request) Successful in 1m41s
Add pgBackRest-based PITR for the production database, shipped disarmed (archive_mode and the base-backup timer gated off) so it stays inert until the operator arms it before real payments — an un-armed deploy cannot pile WAL onto the disk. - Postgres now builds from a thin image carrying pgBackRest (archive_command runs in-process); the prod overlay wires an encrypted (AES-256-CBC), path-style S3 repository with 30-day retention and a daily full base-backup systemd timer. - Repository config/secrets flow through the PROD_PGBACKREST_* Gitea set and write-prod-env.sh; prod-rollback re-renders the same env so a rollback cannot disarm archiving. - Grafana alerts watch pg_stat_archiver (failing / stalled), absent-safe on the test contour, which never archives. - Fix the pre-migration pg_dump to snapshot the whole database (was backend-only, silently excluding payments). - Document the PITR runbook, the arming sequence and the restore drill in deploy/README.md; record the measured cost/perf assessment.
16 lines
786 B
Django/Jinja
16 lines
786 B
Django/Jinja
# Managed by Ansible (deploy/ansible).
|
|
# Daily full pgBackRest base backup for the payments/game database. Runs pgBackRest
|
|
# inside the postgres container (where the repository configuration and PGDATA live);
|
|
# the continuous WAL between base backups is handled by the container's archive_command.
|
|
# Installed only when pitr_enabled is set (see deploy/ansible/group_vars/all.yml).
|
|
[Unit]
|
|
Description=pgBackRest full base backup (scrabble)
|
|
After=docker.service
|
|
Requires=docker.service
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
# docker exec runs as the image's postgres user and inherits the container's PGBACKREST_*
|
|
# environment (the S3 repository + cipher), so no repository config is needed on the host.
|
|
ExecStart=/usr/bin/docker exec scrabble-postgres pgbackrest --stanza=scrabble --type=full backup
|