mirror of https://github.com/auricom/home-cluster.git synced 2025-09-17 18:24:14 +02:00

Files

feisar-bot 5aa8638b96 ⬆️ Update chart app-template to 1.3.2

| datasource | package      | from  | to    |
| ---------- | ------------ | ----- | ----- |
| helm       | app-template | 1.3.1 | 1.3.2 |

2023-02-21 21:55:51 +01:00

backup

⬆️ Update chart app-template to 1.3.2

2023-02-21 21:55:51 +01:00

certs-deploy

⬆️ Update chart app-template to 1.3.2

2023-02-21 21:55:51 +01:00

minio-rclone

⬆️ Update chart app-template to 1.3.2

2023-02-21 21:55:51 +01:00

ks.yaml

…

readme.md

…

readme.md

truenas

truenas-backup S3 Configuration

Create ~/.mc/config.json

{
  "version": "10",
  "aliases": {
    "minio": {
      "url": "https://s3.<domain>",
      "accessKey": "<access-key>",
      "secretKey": "<secret-key>",
      "api": "S3v4",
      "path": "auto"
    }
  }
}

Create the truenas user and password

mc admin user add minio truenas <super-secret-password>

Create the truenas bucket
```
mc mb minio/truenas
```

Create truenas-user-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:ListBucket",
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject"
      ],
      "Effect": "Allow",
      "Resource": ["arn:aws:s3:::truenas/*", "arn:aws:s3:::truenas"],
      "Sid": ""
    }
  ]
}

Apply the bucket policies

mc admin policy add minio truenas-private truenas-user-policy.json

Associate private policy with the user

mc admin policy set minio truenas-private user=truenas

Create a retention policy

mc ilm add minio/truenas --expire-days "90"

minio-rclone S3 Configuration

Create ~/.mc/config.json

{
  "version": "10",
  "aliases": {
    "minio": {
      "url": "https://s3.<domain>",
      "accessKey": "<access-key>",
      "secretKey": "<secret-key>",
      "api": "S3v4",
      "path": "auto"
    }
  }
}

Create the rclone user and password

mc admin user add minio rclone <super-secret-password>

Create rclone-user-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:ListBucket",
        "s3:GetObject"
      ],
      "Effect": "Allow",
      "Resource": ["arn:aws:s3:::opnsense/*", "arn:aws:s3:::opnsense","arn:aws:s3:::truenas/*", "arn:aws:s3:::truenas"],
      "Sid": ""
    }
  ]
}

Apply the bucket policies

mc admin policy add minio rclone-private rclone-user-policy.json

Associate private policy with the user

mc admin policy set minio rclone-private user=rclone