Use Glesys as secondary S3 backup provider. Information on pricing can be found on this page under the headline "Object Storage": https://glesys.se/priser/ Documentation for usage: https://docs.glesys.com/products/storage/object-storage

supernaut refererade till detta ärende

2026-07-11 20:19:00 +00:00

Backups: CI/scratch-instance test-restore job #40

supernaut refererade till detta ärende från en incheckning

2026-07-11 22:37:11 +00:00

feat(backup): model off-site destinations as an ordered list (#41)

supernaut refererade till detta ärende från en incheckning

2026-07-11 22:37:11 +00:00

feat(backup): emit per-destination rclone creds + vaulted bucket (#41)

supernaut refererade till detta ärende från en incheckning

2026-07-11 22:37:11 +00:00

feat(backup): strict multi-destination off-site upload + per-dest metric (#41)

supernaut refererade till detta ärende från en incheckning

2026-07-11 22:37:11 +00:00

feat(monitoring): BackupOffsiteFailed per-destination alert (#41)

supernaut refererade till detta ärende från en incheckning

2026-07-11 22:37:11 +00:00

feat(backup-drill): fetch from the primary off-site destination (#41)

supernaut refererade till detta ärende från en incheckning

2026-07-11 22:37:11 +00:00

docs: two off-site destinations, Glesys primary (#41)

supernaut refererade till detta ärende från en incheckning

2026-07-11 22:37:11 +00:00

docs: README off-site backups now Glesys-primary + Hetzner secondary (#41)

supernaut refererade till detta ärende från en incheckning

2026-07-11 22:37:11 +00:00

fix(monitoring): BackupOffsiteFailed is warning, not critical (#41)

supernaut hänvisade till detta ärende från en ändringsförfrågan som kommer att stänga det

2026-07-11 22:37:58 +00:00

feat(backup): Glesys primary + Hetzner secondary off-site #67

supernaut refererade till detta ärende från bitborg/bitborg-docs

2026-07-11 22:37:59 +00:00

docs: second off-site destination (Glesys primary) #18

supernaut kommenterad

2026-07-11 22:38:33 +00:00

Upphovsperson

Ägare

Implemented, deployed, and verified live on prod. 🇸🇪

Glesys (Swedish, Falkenberg — Ceph S3) is now the primary off-site destination; Hetzner (hel1, EU) is the secondary cross-provider redundancy copy. Off-site targets are an ordered backup_s3_destinations list; each backup uploads to both with strict semantics (any destination failing fails the run); bucket names + keys are vaulted. Per-destination metric gitborg_backup_offsite_last_status{destination} + BackupOffsiteFailed (warning) alongside BackupFailed (critical). The restore drill (ADR 0027) now restores from the Swedish primary.

Verified end-to-end: a live backup landed the archive in both buckets (glesys=0, hetzner=0, overall=0); the restore drill fetched from Glesys and forgejo doctor confirmed 5 repos + DB consistency, VM torn down with no leak; the new alert is loaded (warning) and not firing.

This puts the primary off-site copy on Swedish soil, largely closing the principle-#1 exception — it partially satisfies #39's intent, but #39 stays open for Bahnhof S3 specifically (blocked on its DPA).

gitborg/gitborg-infra#67 (Closes this)
gitborg/gitborg-docs#18 — ADR 0011 update + architecture + principles

Implemented, deployed, and **verified live on prod**. 🇸🇪 **Glesys** (Swedish, Falkenberg — Ceph S3) is now the **primary** off-site destination; **Hetzner** (hel1, EU) is the **secondary** cross-provider redundancy copy. Off-site targets are an ordered `backup_s3_destinations` list; each backup uploads to both with **strict** semantics (any destination failing fails the run); bucket names + keys are vaulted. Per-destination metric `gitborg_backup_offsite_last_status{destination}` + `BackupOffsiteFailed` (warning) alongside `BackupFailed` (critical). The restore drill (ADR 0027) now restores from the Swedish primary. **Verified end-to-end:** a live backup landed the archive in **both** buckets (`glesys`=0, `hetzner`=0, overall=0); the restore drill fetched from **Glesys** and `forgejo doctor` confirmed 5 repos + DB consistency, VM torn down with no leak; the new alert is loaded (warning) and not firing. This puts the **primary** off-site copy on Swedish soil, largely closing the principle-#1 exception — it partially satisfies **#39**'s intent, but #39 stays open for **Bahnhof S3** specifically (blocked on its DPA). - gitborg/gitborg-infra#67 (Closes this) - gitborg/gitborg-docs#18 — ADR 0011 update + architecture + principles

supernaut refererade till detta ärende från en incheckning

2026-07-12 06:31:21 +00:00

docs: second off-site destination (Glesys primary) (#18)

supernaut stängde ärendet

2026-07-12 06:34:43 +00:00

supernaut refererade till detta ärende från en incheckning

2026-07-12 06:34:45 +00:00

feat(backup): Glesys primary + Hetzner secondary off-site (#67)

supernaut refererade till detta ärende från en incheckning

2026-08-03 09:41:33 +00:00

feat(backup): Glesys primary + Hetzner secondary off-site (#67)

Logga in för att delta i denna konversation.