Tool for backing up my home infrastructure. Might be helpful for other folks as well.
- Consistent backups for all resources (i.e. application databases and filesystem states will match)
- Backups stored as files, in a human-readable format where possible
- Little to no impact on running applications
- No need to take databases offline for a consistent backup
- No performance impact on running applications where possible
- Backup jobs run on demand, with no long-lived processes (or containers) needed
- Takes advantage of underlying filesystem features where possible, rather than reimplementing in-band
- ZFS-backed storage reduces backup size via Copy on Write and compression (if enabled)
- Can run locally or in-cluster
- No passwords wherever possible - short-lived x509 certificates instead
See the design decision doc for additional details.
- Vaultwarden
- Backup to an in-cluster PVC, which is then snapshotted
- Restore from an in-cluster PVC
- Only Postgres backend supported (SQLite not supported)
- Teleport
- Backup to an in-cluster PVC, which is then snapshotted
- Restore from an in-cluster PVC
- Only Postgres supported for "core" backend and audit events
- Only S3-compatible object storage supported for audit session logs
- ZFS snapshot to tape drive/library
- Automatic cleanup