will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
450 Commits 10 Branches 0 Tags
a37deca7247cc0f5bcf0b20c0cbc48bf28a710e2
Commit Graph

2 Commits

Author SHA1 Message Date
Will Anderson a37deca724 Add GCS backup bucket + dual-destination hourly backup (R2 + GCS) 
Provision Google Cloud Storage bucket for neuron prod DB backups via Terraform.
Create dedicated backup service account with objectAdmin on the bucket.
Update neuron-prod backup CronJob to run restic against both R2 and GCS hourly —
R2 as primary, GCS as secondary, independent credentials and repositories.
 2026-04-25 15:23:51 -05:00
Will Anderson 5085840a79 Add neuron prod DB backup and tighten actuator surface 
- Add hourly restic backup CronJob to neuron-prod namespace
  - Backs up /data/neuron-prod.db to Cloudflare R2 (legion-neuron-backup bucket)
  - Retention: 24 hourly, 7 daily, 4 weekly — <$0.01/month at current DB size
  - ExternalSecret pulls restic password + R2 creds from Vault secret/r2
- Actuator exposure per environment:
  - prod: health,info only / show-details=never (no internals exposed)
  - stage: health,info,metrics,loggers / show-details=always (pre-prod visibility)
  - dev: full (health,info,metrics,env,beans,loggers,mappings) / show-details=always
 2026-04-23 21:43:20 -05:00