485

Author: kobaltz

.kamal/secrets

@@ -16,5 +16,6 @@ KAMAL_REGISTRY_PASSWORD=$KAMAL_REGISTRY_PASSWORD
 # Improve security by using a password manager. Never check config/master.key into git!
 RAILS_MASTER_KEY=$(cat config/master.key)
 POSTGRES_PASSWORD=$(bin/rails runner "puts Rails.application.credentials.dig(:postgres, :password)")
+POSTGRES_PASS=$(bin/rails runner "puts Rails.application.credentials.dig(:postgres, :password)")
 MINIO_ROOT_USER=$(bin/rails runner "puts Rails.application.credentials.dig(:minio, :root_user)")
 MINIO_ROOT_PASSWORD=$(bin/rails runner "puts Rails.application.credentials.dig(:minio, :root_password)")

config/deploy.yml

@@ -59,7 +59,7 @@ env:
 # Aliases are triggered with "bin/kamal <alias>". You can overwrite arguments on invocation:
 # "bin/kamal logs -r job" will tail logs from the first server in the job section.
 aliases:
-  console: app exec --interactive --reuse "bin/rails console"
+  console: app exec --interactive --reuse "bin/rails console --sandbox"
   shell: app exec --interactive --reuse "bash"
   logs: app logs -f
   dbc: app exec --interactive --reuse "bin/rails dbconsole"
@@ -116,6 +116,21 @@ accessories:
     directories:
       - data:/var/lib/postgresql/data
 
+  postgres_backup:
+    image: kartoza/pg-backup:17-3.5
+    host: 192.168.1.217
+    env:
+      clear:
+        POSTGRES_USER: example
+        POSTGRES_DB: example_production
+        POSTGRES_HOST: 192.168.1.217
+        POSTGRES_PORT: 5432
+        CRON_SCHEDULE: "*/10 * * * *"
+      secret:
+        - POSTGRES_PASS
+    directories:
+      - backups:/backups
+
   minio:
     image: minio/minio
     host: 192.168.1.218