diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2024-08-23 13:08:30 -0300 | 
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2024-08-23 13:08:30 -0300 | 
| commit | 6bc2e4391030bd368a09578b5c10988d41d11367 (patch) | |
| tree | 7059473660f6d73454d6b1248d0a16ad8b7a0e77 | |
| parent | 3c5f1b0d3d82ae5228344c230cfaaf1879f9d735 (diff) | |
| download | puppet-backup-6bc2e4391030bd368a09578b5c10988d41d11367.tar.gz puppet-backup-6bc2e4391030bd368a09578b5c10988d41d11367.tar.bz2  | |
Fix: improved README
| -rw-r--r-- | README | 35 | ||||
| -rw-r--r-- | README.md | 68 | 
2 files changed, 68 insertions, 35 deletions
@@ -1,35 +0,0 @@ -This module contains the general backup conventions and defintions used by the -Fluxo Group according to - -  https://padrao.fluxo.info/backup/ - -It relies on the Backupninja module, - -  https://gitlab.com/shared-puppet-modules-group/backupninja - -What is basically do is to help the creation of standardized definitions for -rdiff-backup and duplicity like these: - -  # local encrypted/signed backup -  backup::duplicity { "localhost": -    encryptkey => "$key_id", -    password   => "$key_password", -  } - -  # remote backup of previously encrypted/signed backup -  backup::rdiff { "$node_name": -    port => "$port", -  } - -The first definition will keep local encrypted/signed backups using duplicity -at /var/backups/duplicity. - -The second definition will push the local /var/backups/duplicity to a remote -destination using rdiff-backup over ssh. - -We choose this two stage approach as the experience showed that it's more -reliable and fast than to let duplicity do all the job. - -Note that this is a simple module that don't manages backup users or keys by -itself: you should do that manually or use another puppet module such as -backupninja::server. diff --git a/README.md b/README.md new file mode 100644 index 0000000..89483cf --- /dev/null +++ b/README.md @@ -0,0 +1,68 @@ +# Fluxo Puppet Backup Module + +## About + +This module contains the general backup conventions and defintions used by the +Fluxo Group according to the [Fluxo Pattern](https://padrao.fluxo.info/backup/). + +It relies on the [backupninja module](https://gitlab.com/shared-puppet-modules-group/backupninja). + +What is basically do is to help the creation of standardized definitions for +backup definitions. + +Note: this is a simple module that don't manages backup users or keys by +itself: you should do that manually or use another puppet module such as +`backupninja::server`. + +## Available methods + +### Remote backups using Borg + +  # remote encrypted backup from localhost to $node_name using Borg +  backup::borg { "$node_name": +    port => "$port", +  } + +### Local encrypted backups pushed to remotes + +One of the methods relies in a local encrypted backup that's later on pushed to +remotes. + +The advantage of this two stage approach, as the experience showed, is that +it's more reliable and fast than to let duplicity do all the job. + +#### Example with [duplicity][] and [rsync][] + +  # local encrypted/signed backup +  backup::duplicity { "localhost": +    encryptkey => "$key_id", +    password   => "$key_password", +  } + +  # remote backup of previously encrypted/signed backup sent to $node_name +  backup::rsync { "$node_name": +    port => "$port", +  } + +* The first definition will keep local encrypted/signed backups using duplicity +  at `/var/backups/duplicity`. + +* The second definition will push the local `/var/backups/duplicity` to a +  remote destination using [rsync][] over SSH. + +#### Example with [duplicity][] and [rdiff-backup][] + +  # local encrypted/signed backup +  backup::duplicity { "localhost": +    encryptkey => "$key_id", +    password   => "$key_password", +  } + +  # remote backup of previously encrypted/signed backup sent to $node_name +  backup::rdiff { "$node_name": +    port => "$port", +  } + +[duplicity]: https://duplicity.gitlab.io/ +[rdiff-backup]: https://rdiff-backup.net/ +[rsync]: https://rsync.samba.org/  | 
