Compare commits

...

2 commits

Author SHA1 Message Date
1c1c7c22df
Migrate Hedgedoc from MySQL to PostgreSQL. 2024-04-04 20:26:59 +02:00
a8ea9a6aed
Fix PostgreSQL backup task. 2024-04-04 20:12:25 +02:00
9 changed files with 39 additions and 82 deletions

View file

@ -70,7 +70,6 @@ projects_to_backup:
borg_repodir: "{{ cifs_mounts['backups']['path'] }}/borg"
borg_passphrase_file: /etc/borg-passphrase.txt
hedgedoc_mysql_root_password_file: "/etc/hedgedoc-mysql-root-password.txt"
borg_prune_options: |
--keep-within=1d
--keep-daily=7
@ -114,7 +113,6 @@ users:
coturn: 666
etebase: 373
hedgedoc: 1004
hedgedoc_mysql: 1005
homepage: 8686
lldap: 1007
mailserver: 8
@ -133,8 +131,7 @@ volumes:
coturn_tls_certificate_file: "/etc/letsencrypt/live/turn.{{ domain }}/fullchain.pem"
coturn_tls_certificate_key_file: "/etc/letsencrypt/live/turn.{{ domain }}/privkey.pem"
etebase_datadir: /mnt/etebasedata
hedgedoc_mysql_datadir: /mnt/hedgedoc/mysql-data
hedgedoc_configdir: /mnt/hedgedoc/config
hedgedoc_uploadsdir: /mnt/hedgedocuploads
lldap_datadir: /mnt/lldapdata
mailserver_datadir: /mnt/mailserverdata
mailserver_tls_certificate_file: "/etc/letsencrypt/live/mail.{{ domain }}/fullchain.pem"

View file

@ -22,20 +22,6 @@
mode: '600'
when: not borg_stat_passphrase_file_result.stat.exists or borg_update_passphrase | default(false) | bool
- name: Get Hedgedoc MySQL root password file stat
stat:
path: "{{ hedgedoc_mysql_root_password_file }}"
register: hedgedoc_mysql_root_password_file_result
- name: "Template hedgedoc-mysql-root-password.txt to {{ hedgedoc_mysql_root_password_file }}"
template:
src: hedgedoc-mysql-root-password.txt
dest: "{{ hedgedoc_mysql_root_password_file }}"
owner: root
group: root
mode: '600'
when: not hedgedoc_mysql_root_password_file_result.stat.exists or hedgedoc_update_mysql_root_password | default(false) | bool
- name: Get borg repository stat
stat:
path: "{{ borg_repodir }}"

View file

@ -1 +0,0 @@
{{ hedgedoc_secrets['mysql_root_password'] }}

View file

@ -1,22 +1,15 @@
- name: Backup MySQL database
community.docker.docker_container_exec:
container: hedgedoc-mysql
docker_host: "{{ docker_host }}"
argv:
- /bin/bash
- "-c"
- "mysqldump hedgedoc > /var/lib/mysql/hedgedoc-dump.sql"
env:
MYSQL_PWD: "{{ hedgedoc_secrets['mysql_root_password'] if hedgedoc_secrets['mysql_root_password'] is defined else lookup('ansible.builtin.file', hedgedoc_mysql_root_password_file) }}"
- name: Create borg backup
command:
cmd: |
- name: "Backup PostgreSQL hedgedoc database & {{ volumes['hedgedoc_uploadsdir'] }} directory"
shell: >
docker exec postgres
pg_dump -c {{ role_name }} |
borg create
--compression=lzma
--compression lzma
"{{ borg_repodir }}::{{ role_name }}-{now:%Y-%m-%d_%H-%M-%S}"
{{ volumes['hedgedoc_mysql_datadir'] }}/hedgedoc-dump.sql
"{{ volumes['hedgedoc_uploadsdir'] }}"
-
--stdin-name dump_{{ role_name }}.sql
environment:
DOCKER_HOST: "{{ docker_host }}"
BORG_PASSCOMMAND: "cat {{ borg_passphrase_file }}"
become: true

View file

@ -1,32 +1,26 @@
- name: "Create {{ project_dir }} project directory"
- name: "Create {{ project_dir }} directory"
file:
path: "{{ project_dir }}"
state: directory
- name: Template docker-compose.yaml to project directory
- name: Template docker-compose.yaml & .env to project directory
template:
src: docker-compose.yaml
dest: "{{ project_dir }}/docker-compose.yaml"
src: "{{ item }}"
dest: "{{ project_dir }}/{{ item }}"
owner: "{{ host_uid }}"
group: "{{ host_uid }}"
mode: '640'
mode: '600'
loop:
- docker-compose.yaml
- .env
- name: "Create directory {{ volumes['hedgedoc_configdir'] }} with correct permissions"
- name: "Create (if not exists) directory {{ volumes['hedgedoc_uploadsdir'] }} & set permissions"
file:
path: "{{ volumes['hedgedoc_configdir'] }}"
path: "{{ volumes['hedgedoc_uploadsdir'] }}"
state: directory
owner: "{{ users['hedgedoc'] + uid_shift }}"
group: "{{ users['hedgedoc'] + uid_shift }}"
mode: '770'
become: true
- name: "Create directory {{ volumes['hedgedoc_mysql_datadir'] }} with correct permissions"
file:
path: "{{ volumes['hedgedoc_mysql_datadir'] }}"
state: directory
owner: "{{ users['hedgedoc_mysql'] + uid_shift }}"
group: "{{ users['hedgedoc_mysql'] + uid_shift }}"
mode: '770'
mode: '700'
become: true
- name: Pull project services

View file

@ -0,0 +1,8 @@
CMD_DB_DIALECT=postgres
CMD_DB_HOST='postgres.{{ domain }}'
CMD_DB_DATABASE=hedgedoc
CMD_DB_USERNAME='{{ hedgedoc_secrets["postgres_user"] }}'
CMD_DB_PASSWORD='{{ hedgedoc_secrets["postgres_password"] }}'
CMD_DOMAIN='hedgedoc.{{ domain }}'
CMD_PROTOCOL_USESSL=true
CMD_SESSION_SECRET='{{ hedgedoc_secrets["session_secret"] }}'

View file

@ -1,33 +1,11 @@
services:
hedgedoc:
container_name: hedgedoc
image: lscr.io/linuxserver/hedgedoc:latest
image: quay.io/hedgedoc/hedgedoc:1.9.9
restart: always
environment:
- PUID={{ users['hedgedoc'] }}
- PGID={{ users['hedgedoc'] }}
- TZ={{ timezone }}
- DB_HOST=hedgedoc-mysql
- DB_PORT=3306
- DB_USER=root
- DB_PASS={{ hedgedoc_secrets['mysql_root_password'] }}
- DB_NAME=hedgedoc
- CMD_DOMAIN=hedgedoc.{{ domain }}
- CMD_PROTOCOL_USESSL=true
user: {{ users['hedgedoc'] }}:{{ users['hedgedoc'] }}
env_file: .env
ports:
- 127.0.0.1:{{ ports['hedgedoc'] }}:3000
volumes:
- {{ volumes['hedgedoc_configdir'] }}:/config
mysql:
container_name: hedgedoc-mysql
image: docker.io/library/mysql:latest
restart: always
user: {{ users['hedgedoc_mysql'] }}:{{ users['hedgedoc_mysql'] }}
environment:
MYSQL_DATABASE: hedgedoc
MYSQL_ROOT_PASSWORD: "{{ hedgedoc_secrets['mysql_root_password'] }}"
volumes:
- {{ volumes['hedgedoc_mysql_datadir'] }}:/var/lib/mysql
- {{ volumes['hedgedoc_uploadsdir'] }}:/hedgedoc/public/uploads

View file

@ -1,5 +1,5 @@
- name: Create borg backup from PostgreSQL dumpall
shell: |
shell: >
docker exec postgres
pg_dumpall |
borg create

View file

@ -25,7 +25,9 @@ coturn_secrets:
static_auth_secret:
hedgedoc_secrets:
mysql_root_password:
postgres_user:
postgres_password:
session_secret:
lldap_secrets:
jwt_secret: