will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add neuron prod DB backup and tighten actuator surface

Browse Source 
- Add hourly restic backup CronJob to neuron-prod namespace
  - Backs up /data/neuron-prod.db to Cloudflare R2 (legion-neuron-backup bucket)
  - Retention: 24 hourly, 7 daily, 4 weekly — <$0.01/month at current DB size
  - ExternalSecret pulls restic password + R2 creds from Vault secret/r2
- Actuator exposure per environment:
  - prod: health,info only / show-details=never (no internals exposed)
  - stage: health,info,metrics,loggers / show-details=always (pre-prod visibility)
  - dev: full (health,info,metrics,env,beans,loggers,mappings) / show-details=always
This commit is contained in:
Will Anderson
2026-04-23 21:43:20 -05:00
parent cd0cb30933
commit 5085840a79
5 changed files with 112 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/k8s/neuron-technologies/dev/configmap.yaml
+2 -1
View File
@@ -10,5 +10,6 @@ data:
NEURON_DB_PATH: "/data/neuron-dev.db"
NEURON_STORAGE_PATH: "/data"
SERVER_TOMCAT_ACCESSLOG_ENABLED: "true"
MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE: "health,info,metrics"
# Dev: full exposure for debugging
MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE: "health,info,metrics,env,beans,loggers,mappings"
MANAGEMENT_ENDPOINT_HEALTH_SHOW_DETAILS: "always"