infrastructure/servers/legion/k8s/neuron-technologies/prod/kustomization.yaml at b9e1c94b36f5edbaecc33aa6b8e6044838034330 - infrastructure - Gitea: Git with a cup of tea

will.anderson/infrastructure

Files

T

Will Anderson 5085840a79 Add neuron prod DB backup and tighten actuator surface

- Add hourly restic backup CronJob to neuron-prod namespace
  - Backs up /data/neuron-prod.db to Cloudflare R2 (legion-neuron-backup bucket)
  - Retention: 24 hourly, 7 daily, 4 weekly — <$0.01/month at current DB size
  - ExternalSecret pulls restic password + R2 creds from Vault secret/r2
- Actuator exposure per environment:
  - prod: health,info only / show-details=never (no internals exposed)
  - stage: health,info,metrics,loggers / show-details=always (pre-prod visibility)
  - dev: full (health,info,metrics,env,beans,loggers,mappings) / show-details=always

2026-04-23 21:43:20 -05:00

12 lines

239 B

YAML

Raw Blame History

 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - configmap.yaml
   - pvc.yaml
   - externalsecret.yaml
   - mcp-deployment.yaml
   - rest-deployment.yaml
   - services.yaml
   - ingress.yaml
   - backup-cronjob.yaml