---
# Ceph RGW (S3) backup target for the gitea CNPG cluster, provisioned by the
# in-estate cephrgw-operator. One dedicated bucket + owner user per cluster.
apiVersion: ceph.unkin.net/v1alpha1
kind: ObjectStoreUser
metadata:
  name: cnpg-gitea-backup
  namespace: gitea
spec:
  displayName: "CNPG backup owner (gitea)"
  # RGW users are global; keep the uid namespace-qualified so it never collides.
  uid: cnpg-gitea-backup
  maxBuckets: 5
  # Operator writes AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY (+ RGW_UID,
  # S3_ENDPOINT) into this Secret; the Cluster's barmanObjectStore consumes it.
  secretName: cnpg-gitea-backup-s3
  retainOnDelete: true
---
apiVersion: ceph.unkin.net/v1alpha1
kind: Bucket
metadata:
  name: cnpg-gitea
  namespace: gitea
spec:
  bucketName: cnpg-gitea
  ownerRef: cnpg-gitea-backup
  versioning: false
  tags:
    app: gitea
    purpose: cnpg-backup
  retainOnDelete: true
---
apiVersion: postgresql.cnpg.io/v1
kind: ScheduledBackup
metadata:
  name: cnpg-gitea-nightly
  namespace: gitea
spec:
  # 6-field CNPG cron (seconds first). 04:00 — next free slot after netbox
  # (03:40), keeping the estate's 20-minute stagger.
  schedule: "0 0 4 * * *"
  immediate: false
  backupOwnerReference: self
  method: barmanObjectStore
  cluster:
    name: gitea-postgres