pg-s3-backup/docker-compose.yml at main · Coders-Compass/pg-s3-backup · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
services:
  postgres:
    image: postgres:${POSTGRES_VERSION:-18}-alpine
    environment:
      POSTGRES_DB: ${POSTGRES_DB:-myapp}
      POSTGRES_USER: ${POSTGRES_USER:-postgres}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}
    volumes:
      - postgres_data:/var/lib/postgresql
    networks:
      - backup-net
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-postgres} -d ${POSTGRES_DB:-myapp}"]
      interval: 10s
      timeout: 5s
      retries: 5

  garage:
    image: dxflrs/garage:v2.2.0@sha256:45a61ce3f7c9c24fc23d9ed2b09b27ed560ab87b34605d175d5c588f539c24e4
    environment:
      GARAGE_ALLOW_WORLD_READABLE_SECRETS: "true"
    volumes:
      - garage_data:/var/lib/garage/data
      - garage_meta:/var/lib/garage/meta
      - ./docker/garage/garage.toml:/etc/garage.toml:ro
    networks:
      - backup-net
    healthcheck:
      test: ["CMD", "/garage", "-c", "/etc/garage.toml", "node", "id"]
      interval: 5s
      timeout: 5s
      retries: 10
      start_period: 3s

  garage-init:
    image: alpine:3.23@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659
    depends_on:
      garage:
        condition: service_healthy
    networks:
      - backup-net
    environment:
      S3_ACCESS_KEY: ${S3_ACCESS_KEY:-GK0123456789abcdef01234567}
      S3_SECRET_KEY: ${S3_SECRET_KEY:-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef}
      S3_BUCKET: ${S3_BUCKET:-backups}
      GARAGE_ADMIN_TOKEN: admin-token
    volumes:
      - ./docker/garage/scripts/init.sh:/init.sh:ro
    entrypoint: ["/bin/sh", "/init.sh"]

  backup:
    build:
      context: ./docker/backup
      dockerfile: Dockerfile
    depends_on:
      postgres:
        condition: service_healthy
      garage-init:
        condition: service_completed_successfully
    environment:
      POSTGRES_HOST: postgres
      POSTGRES_PORT: 5432
      POSTGRES_DB: ${POSTGRES_DB:-myapp}
      POSTGRES_USER: ${POSTGRES_USER:-postgres}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}
      S3_ENDPOINT: ${S3_ENDPOINT:-http://garage:3900}
      S3_BUCKET: ${S3_BUCKET:-backups}
      S3_ACCESS_KEY: ${S3_ACCESS_KEY:-GK0123456789abcdef01234567}
      S3_SECRET_KEY: ${S3_SECRET_KEY:-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef}
      # Retention policy configuration
      RETENTION_KEEP_LAST: ${RETENTION_KEEP_LAST:-3}
      RETENTION_KEEP_HOURLY: ${RETENTION_KEEP_HOURLY:-24}
      RETENTION_KEEP_DAILY: ${RETENTION_KEEP_DAILY:-7}
      RETENTION_KEEP_WEEKLY: ${RETENTION_KEEP_WEEKLY:-4}
      RETENTION_KEEP_MONTHLY: ${RETENTION_KEEP_MONTHLY:-6}
      RETENTION_KEEP_YEARLY: ${RETENTION_KEEP_YEARLY:-2}
      RETENTION_MIN_BACKUPS: ${RETENTION_MIN_BACKUPS:-1}
      RETENTION_DRY_RUN: ${RETENTION_DRY_RUN:-false}
    networks:
      - backup-net
    labels:
      ofelia.enabled: "true"
      ofelia.job-exec.backup.schedule: ${BACKUP_SCHEDULE:-0 * * * *}
      ofelia.job-exec.backup.command: /scripts/backup.sh
      ofelia.job-exec.cleanup.schedule: ${CLEANUP_SCHEDULE:-0 1 * * *}
      ofelia.job-exec.cleanup.command: /scripts/cleanup.sh

  ofelia:
    image: mcuadros/ofelia:v3.0.8@sha256:c36048db84b0b54d47a689f723f6f5d19281ac4b87d90fa6433a4582b93f1a5b
    depends_on:
      - backup
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - backup-net
    command: daemon --docker

networks:
  backup-net:
    driver: bridge

volumes:
  postgres_data:
  garage_data:
  garage_meta: