From c074df4bc73a5e9f879f2a28d2517fde2d303e1b Mon Sep 17 00:00:00 2001
From: Ian Fijolek <ian@iamthefij.com>
Date: Wed, 27 Jul 2022 22:04:22 -0700
Subject: [PATCH] Working backup and restore

---
 nomad/backups/backup.nomad       | 17 +++++++++++------
 nomad/backups/jobs/consul.hcl    | 16 ++--------------
 nomad/backups/jobs/lldap.hcl     | 16 ++--------------
 nomad/backups/jobs/nextcloud.hcl | 16 ++--------------
 4 files changed, 17 insertions(+), 48 deletions(-)

diff --git a/nomad/backups/backup.nomad b/nomad/backups/backup.nomad
index 54eb7a8..dc52494 100644
--- a/nomad/backups/backup.nomad
+++ b/nomad/backups/backup.nomad
@@ -43,7 +43,7 @@ job "backup%{ if batch_node != null }-oneoff-${batch_node}%{ endif }" {
 
     volume "all-volumes" {
       type = "host"
-      read_only = true
+      read_only = false
       source = "all-volumes"
     }
 
@@ -86,7 +86,7 @@ job "backup%{ if batch_node != null }-oneoff-${batch_node}%{ endif }" {
       volume_mount {
         volume = "all-volumes"
         destination = "/data"
-        read_only = true
+        read_only = false
       }
 
       config {
@@ -123,14 +123,19 @@ job "backup%{ if batch_node != null }-oneoff-${batch_node}%{ endif }" {
       template {
         # Probably want to use database credentials that have access to dump all tables
         data = <<EOF
-{{ with secret "kv/data/nextcloud" }}
+{{ with secret "kv/data/nextcloud" -}}
 MYSQL_DATABASE={{ .Data.data.db_name }}
 MYSQL_USER={{ .Data.data.db_user }}
 MYSQL_PASSWORD={{ .Data.data.db_pass }}
-{{ end }}
-{{ with secret "kv/data/backups" }}
+{{ end -}}
+{{ with secret "kv/data/backups" -}}
 BACKUP_PASSPHRASE={{ .Data.data.backup_passphrase }}
-{{ end }}
+RCLONE_FTP_HOST={{ .Data.data.nas_ftp_host }}
+RCLONE_FTP_USER={{ .Data.data.nas_ftp_user }}
+RCLONE_FTP_PASS={{ .Data.data.nas_ftp_pass | toJSON }}
+RCLONE_FTP_EXPLICIT_TLS=true
+RCLONE_FTP_NO_CHECK_CERTIFICATE=true
+{{ end -}}
         EOF
         destination = "secrets/db.env"
         env = true
diff --git a/nomad/backups/jobs/consul.hcl b/nomad/backups/jobs/consul.hcl
index 0da894b..62693e2 100644
--- a/nomad/backups/jobs/consul.hcl
+++ b/nomad/backups/jobs/consul.hcl
@@ -1,23 +1,11 @@
 job "Consul" {
-  schedule = "* * * * *"
+  schedule = "0 * * * *"
 
   config {
-    # TODO: Backup to a meaningful location, this is just for testing
-    repo = "/local/repo"
-    # Read from secret file
+    repo = "rclone::ftp,env_auth:/nomad/consul"
     passphrase = env("BACKUP_PASSPHRASE")
   }
 
-  # Remove when using a proper backup destination
-  task "Create dir for repo" {
-    pre_script {
-      on_backup = "echo 'Backing up something'"
-    }
-    pre_script {
-      on_backup = "mkdir -p /local/repo"
-    }
-  }
-
   task "Use consul snapshots" {
     pre_script {
       on_backup = "mkdir -p /local/consul"
diff --git a/nomad/backups/jobs/lldap.hcl b/nomad/backups/jobs/lldap.hcl
index 8ec7cf2..ecc85b9 100644
--- a/nomad/backups/jobs/lldap.hcl
+++ b/nomad/backups/jobs/lldap.hcl
@@ -1,23 +1,11 @@
 job "lldap" {
-  schedule = "* * * * *"
+  schedule = "0 * * * *"
 
   config {
-    # TODO: Backup to a meaningful location, this is just for testing
-    repo = "/local/repo"
-    # Read from secret file
+    repo = "rclone::ftp,env_auth:/nomad/lldap"
     passphrase = env("BACKUP_PASSPHRASE")
   }
 
-  # Remove when using a proper backup destination
-  task "Create dir for repo" {
-    pre_script {
-      on_backup = "echo 'Backing up something'"
-    }
-    pre_script {
-      on_backup = "mkdir -p /local/repo"
-    }
-  }
-
   # sqlite "Backup database" {
   #   path    = "/data/lldap/users.db"
   #   # sqlite3 /data/lldap/users.db .backup /data/lldap/users.db.bak
diff --git a/nomad/backups/jobs/nextcloud.hcl b/nomad/backups/jobs/nextcloud.hcl
index bf18641..c13df81 100644
--- a/nomad/backups/jobs/nextcloud.hcl
+++ b/nomad/backups/jobs/nextcloud.hcl
@@ -1,23 +1,11 @@
 job "Nextcloud" {
-  schedule = "* * * * *"
+  schedule = "0 * * * *"
 
   config {
-    # TODO: Backup to a meaningful location, this is just for testing
-    repo = "/local/repo"
-    # Read from secret file
+    repo = "rclone::ftp,env_auth:/nomad/nextcloud"
     passphrase = env("BACKUP_PASSPHRASE")
   }
 
-  # Remove when using a proper backup destination
-  task "Create dir for repo" {
-    pre_script {
-      on_backup = "echo 'Backing up something'"
-    }
-    pre_script {
-      on_backup = "mkdir -p /local/repo"
-    }
-  }
-
   mysql "Backup database" {
     hostname       = env("MYSQL_HOST")
     port           = env("MYSQL_PORT")