add puppetserver to backup #1907
Conversation
evgeni
force-pushed
the
puppet-backup
branch
from
d77d3ba
to
7525a4b
Compare
|
|
||
| restic::repository { 'puppetserver': | ||
| backup_cap_dac_read_search => true, | ||
| backup_path => '/etc/puppetlabs', |
There was a problem hiding this comment.
What are we backing up here?
/etc/puppetlabs/codeis deployed from https://github.com/theforeman/foreman-infra/etc/puppetlabs/puppet/datais indeed important local data/etc/puppetlabs/puppet/sslcan also be useful/etc/puppetlabs/puppetserveris managed by Puppet and can be easily bootstrapped (https://theforeman.github.io/foreman-infra/bootstrap/)
What are we missing:
/opt/puppetlabs/server/data/puppetserver/sshSSH keys we generated. In theory they will be regenerated and kept in sync, but in Redmine we have imported some keys./opt/puppetlabs/server/data/puppetserver/foreman_cache_datathese cached entries will also get regenerated
In short: I think /etc/puppetlabs/puppet/data is the most important part since it's not stored anywhere else. When I set it up that way I didn't want to bother with hiera-gpg, but that is perhaps a better way.What are we backing up here?
/etc/puppetlabs/codeis deployed from https://github.com/theforeman/foreman-infra/etc/puppetlabs/puppet/datais indeed important local data/etc/puppetlabs/puppet/sslcan also be useful/etc/puppetlabs/puppetserveris managed by Puppet and can be easily bootstrapped (https://theforeman.github.io/foreman-infra/bootstrap/)
What are we missing:
/opt/puppetlabs/server/data/puppetserver/sshSSH keys we generated. In theory they will be regenerated and kept in sync, but in Redmine we have imported some keys./opt/puppetlabs/server/data/puppetserver/foreman_cache_datathese cached entries will also get regenerated
In short: I think /etc/puppetlabs/puppet/data is the most important part since it's not stored anywhere else. When I set it up that way I didn't want to bother with hiera-gpg, but that is perhaps a better way.
There was a problem hiding this comment.
added the four paths that seem useful (doesn't seem to be excessive in size either way)
evgeni
force-pushed
the
puppet-backup
branch
from
7525a4b
to
ca827bd
Compare
I intend to address that via replication of backups to other locations. |
evgeni
force-pushed
the
puppet-backup
branch
from
ca827bd
to
c57b62f
Compare
evgeni
force-pushed
the
puppet-backup
branch
from
c57b62f
to
ba1445a
Compare
| @@ -20,6 +20,7 @@ profiles::backup::receiver::targets: | |||
| - redmine01 | |||
| - master02 | |||
There was a problem hiding this comment.
Slightly related question: shouldn't this be controller01 now? I may have messed that up in the Jenkins migration.
No description provided.