Files
esh-pfi-infrastructure/configs/restic/nh3-dev/profiles.yaml
T
vh 76a0768fdb restic: drop scheduled forget across all 6 hosts
Forget against an --append-only rest-server fails every night (delete
ops blocked). The resulting daily failure cluttered service status and
logs without ever actually retiring old snapshots. Schedule is now
removed from the forget block in all six profiles; the keep-daily /
keep-weekly / keep-monthly / keep-yearly policy remains so manual
invocations (during prune ceremonies, when --append-only is
temporarily off) honor the intended retention.

Files:
  configs/restic/ana-docker/profiles.yaml
  configs/restic/ana-ml2/profiles.yaml
  configs/restic/nh3-docker/profiles.yaml
  configs/restic/esh-docker-vm/profiles.yaml
  configs/restic/vm-esh-nas/profiles.yaml
  configs/restic/nh3-dev/profiles.yaml

Each file has an inline comment marking why the schedule was dropped
so a future reader doesn't re-add it thinking it was an oversight.

STATUS.md: removed the "install Backrest nightly-restart timer" line
item. User confirmed the UI timeout hits even at startup, so periodic
restart wouldn't actually help. Root cause remains deferred.
2026-04-21 17:00:23 -07:00

113 lines
3.7 KiB
YAML

# resticprofile config for nh3-dev.
#
# User workstation at the NH3 site (nh3-dev.phasefinal.com). Primary
# payload is /home/lkraven — ~12 GB of active development code, shell
# history, dotfiles, notes, Claude Code memory, etc. Not a server; no
# Docker stacks to dump. No databases.
#
# Writes to the Synology rest-server at 10.100.50.50:8000 as user
# `nh3-dev` — site-local, matches the pattern nh3-docker uses.
#
# Schedule accommodates a workstation that may be off/sleeping at the
# scheduled time: systemd timer uses Persistent=true (resticprofile sets
# this by default for schedule-permission: system) so a missed run
# catches up on next boot.
#
# Excludes trim ~8 GB of regenerable caches from the 22 GB home. First
# snapshot should land at ~14 GB; incrementals much smaller.
version: "1"
global:
priority: low
ionice: true
ionice-class: 2
ionice-level: 7
min-memory: 200 # workstation has more RAM than agents; give restic a bit more
default:
env-file: /etc/restic/restic.env
env:
RESTIC_PASSWORD_FILE: /etc/restic/password
initialize: false
lock: /var/lock/restic-nh3-dev.lock
backup:
verbose: 1
run-after:
- date +%s > /var/lib/restic/last-success
source:
- /home/lkraven # the whole reason this backup exists
- /etc # host config
- /root # root's state, ssh keys, etc.
exclude:
# ---- Language / toolchain caches (all regenerable) -------------------
- /home/lkraven/.cache
- /home/lkraven/.rustup
- /home/lkraven/.cargo/registry
- /home/lkraven/.cargo/git
- /home/lkraven/.npm
- /home/lkraven/.pnpm-store
- /home/lkraven/.m2
- /home/lkraven/.gradle
- /home/lkraven/.conda
- /home/lkraven/go/pkg
- /home/lkraven/.dotnet
# ---- Editor / remote-dev caches ---------------------------------------
- /home/lkraven/.vscode-server
- /home/lkraven/.vscode
# ---- Project build outputs (often committed to .gitignore) ------------
- "**/node_modules"
- "**/__pycache__"
- "**/.venv"
- "**/venv"
- "**/target" # Rust/Java/other — regenerable from source
- "**/dist"
- "**/build"
- "**/.pytest_cache"
- "**/.tox"
- "**/.next" # Next.js
- "**/.nuxt" # Nuxt
# ---- Trash / shell noise ---------------------------------------------
- /home/lkraven/.local/share/Trash
- /home/lkraven/.mozilla/firefox/*/Cache*
- /home/lkraven/.thumbnails
- /home/lkraven/.zcompdump*
# ---- Browser profiles (if any) ----------------------------------------
- /home/lkraven/snap
- /home/lkraven/.steam
- /home/lkraven/Steam
# ---- Root side ---------------------------------------------------------
- /root/.cache
- /root/.npm
- /root/.local/share/Trash
# ---- Logs / pids ------------------------------------------------------
- "**/*.log"
- "**/*.log.*"
- "**/*.pid"
tag:
- host:nh3-dev
- site:nh3
- fleet:pfi
- role:workstation
schedule: "*-*-* 01:00:00"
schedule-permission: system
schedule-log: /var/log/restic-backup.log
forget:
keep-daily: 7
keep-weekly: 4
keep-monthly: 12
keep-yearly: 3
tag:
- host:nh3-dev
# Schedule removed 2026-04-21: forget against --append-only rest-server
# always fails (delete ops blocked). Run manually during the prune
# ceremony when --append-only is temporarily off.
check:
read-data-subset: 10%
schedule: "Sun *-*-* 05:00:00"
schedule-permission: system
schedule-log: /var/log/restic-check.log