ginnoir
63889fc150
Deploy to valhalla / deploy (push) Has been cancelled
Native OAuth/OIDC for Homarr, BookStack, Gitea, and MinIO console; forward_auth with local auth disabled for code-server, uptime, and kopia; Caddy and Authentik scripts updated to match.
backup stack
Kopia → Backblaze B2. Backs up /config, selected labdata paths (see SCOPE.md), and nightly SQL dumps.
Before first deploy
-
Backblaze B2 (recommended offsite — ~$6/TB/mo)
- Create a bucket (e.g.
valhalla-homelab-backup) - Create an Application Key scoped to that bucket
- Note the S3 endpoint for your region
- Create a bucket (e.g.
-
Fill
stack.envKOPIA_REPOSITORY_PASSWORD—openssl rand -hex 32B2_KEY_ID,B2_APPLICATION_KEY,B2_BUCKET,B2_ENDPOINT
-
Host paths
/config/kopia/{config,cache,logs}— Kopia state/config/backup/dumps— nightly SQL dumps/config/backup/{init-kopia.sh,snapshot-paths.txt,crontab,scripts/}— copied from this repo (Portainer CE cannot bind-mount relative git paths; sync after editing those files)
-
Register new Portainer git stack →
stacks/backup(one-time) -
Push → Portainer redeploys within 5 min
After deploy
- UI: https://backup.ginnoir.com (LAN/Tailscale) — username
kopia, password =KOPIA_REPOSITORY_PASSWORDinstack.env - Subscribe phone to ntfy topic
backup(or path inNTFY_URL) - Restore test (done 2026-06-11):
postgres_resumeSQL dump + Gitea repos Kopia snapshot from B2
Schedule
| Time | What |
|---|---|
| 02:50 | backup-dump-databases.sh — SQL dumps |
| 03:00 | Kopia snapshots (paths in snapshot-paths.txt) |
If B2 creds are empty
Kopia still starts with UI — configure repository manually, then set policies for each path in snapshot-paths.txt.