Wire ringtail blumeops-pg into backups + Grafana

eblume commented

2026-06-03 11:02:25 -07:00

Owner

Prereq for the wave-1 decommission. The cutover moved paperless+teslamate (postgres) and mealie (SQLite) to ringtail, but borgmatic and the Grafana TeslaMate datasource still pointed at the minikube copies — the migrated live data was unbacked since cutover, and dropping the minikube DBs would break the TeslaMate dashboards.

Tailscale Service blumeops-pg-ringtail + Caddy L4 route pg.ops.eblu.me:5434
borgmatic: teslamate + paperless postgres → :5434; mealie SQLite → ssh:eblume@ringtail
Grafana TeslaMate datasource → pg.ops.eblu.me:5434

Deploy: sync databases-ringtail (tailscale svc) + grafana from branch; provision-indri --tags caddy,borgmatic; verify a backup run + dashboards. Unblocks the decommission PR.

Prereq for the wave-1 decommission. The cutover moved paperless+teslamate (postgres) and mealie (SQLite) to ringtail, but borgmatic and the Grafana TeslaMate datasource still pointed at the minikube copies — the migrated live data was unbacked since cutover, and dropping the minikube DBs would break the TeslaMate dashboards. - Tailscale Service `blumeops-pg-ringtail` + Caddy L4 route `pg.ops.eblu.me:5434` - borgmatic: teslamate + paperless postgres → :5434; mealie SQLite → ssh:eblume@ringtail - Grafana TeslaMate datasource → pg.ops.eblu.me:5434 Deploy: sync databases-ringtail (tailscale svc) + grafana from branch; provision-indri --tags caddy,borgmatic; verify a backup run + dashboards. Unblocks the decommission PR.

eblume added 1 commit

2026-06-03 11:02:25 -07:00

Wire ringtail blumeops-pg into backups + Grafana f80aae693f

The wave-1 cutover moved paperless + teslamate (postgres) and mealie (SQLite)
to ringtail, but borgmatic and the Grafana TeslaMate datasource still pointed
at the minikube-hosted copies — so the migrated live data was unbacked and
the dashboards would break when the minikube DBs are dropped.

- Add a Tailscale Service (blumeops-pg-ringtail) + Caddy L4 route
  pg.ops.eblu.me:5434 for the ringtail blumeops-pg cluster.
- Repoint borgmatic teslamate + paperless postgres dumps to :5434 and the
  mealie SQLite dump to the ringtail kubectl target (ssh:eblume@ringtail).
- Repoint the Grafana TeslaMate datasource to pg.ops.eblu.me:5434.

Closes the post-cutover backup gap and unblocks the wave-1 decommission.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

eblume added 1 commit

2026-06-03 11:15:28 -07:00

borgmatic: add .pgpass entry for ringtail blumeops-pg (port 5434) 83b4306edb

The .pgpass is a hardcoded port list, not derived from the database list,
so repointing teslamate/paperless to :5434 left them without credentials
(pg_dump would fail 'no password supplied'). Add the 5434 entry.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

eblume added 1 commit

2026-06-03 11:26:27 -07:00

mealie: add python3 to image for the borgmatic SQLite dump helper 22cfd864e2

The borgmatic k8s-sqlite-dump helper runs python3 (stdlib sqlite3 .backup)
inside the pod, but the minimal Nix mealie image had no python3 on PATH, so
the mealie SQLite backup produced a 0-byte file. Add pkgs.python3 (same
nixpkgs build mealie uses, so negligible closure growth), matching shower.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

eblume added 1 commit

2026-06-03 11:27:44 -07:00

mealie-ringtail: use python3-enabled image v3.16.0-22cfd86-nix 0d6584f3c3

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

eblume added 1 commit

2026-06-03 11:32:28 -07:00

borgmatic: stage SQLite dump beside source DB (minimal images lack /tmp) 71d5759eb5

The helper wrote its staging copy to /tmp, but minimal nix images (mealie)
have no /tmp, so the dump failed 'unable to open database file'. Write it
next to the source DB instead (always on a writable volume); works for any
image, shower included.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>