Kyle Isom
b0afe3b993
- Rename dist/ -> deploy/ with subdirs examples/, scripts/, systemd/ per standard repository layout - Update .gitignore: gitignore all of dist/ (build output only) - Makefile: all target is now vet->lint->test->build; add vet, proto-lint, devserver targets; CGO_ENABLED=0 for builds (modernc.org/sqlite is pure-Go, no C toolchain needed); CGO_ENABLED=1 retained for tests (race detector) - Dockerfile: builder -> golang:1.26-alpine, runtime -> alpine:3.21; drop libc6 dep; add /srv/mcias/certs and /srv/mcias/backups to image - deploy/systemd/mcias.service: add RestrictSUIDSGID=true - deploy/systemd/mcias-backup.service: new oneshot backup unit - deploy/systemd/mcias-backup.timer: daily 02:00 UTC, 5m jitter - deploy/scripts/install.sh: install backup units and enable timer; create certs/ and backups/ subdirs in /srv/mcias - buf.yaml: add proto linting config for proto-lint target - internal/db: add Snapshot and SnapshotDir methods (VACUUM INTO) - cmd/mciasdb: add snapshot subcommand; no master key required
16 lines
405 B
SYSTEMD
16 lines
405 B
SYSTEMD
[Unit]
|
|
Description=Daily MCIAS Database Backup
|
|
Documentation=man:mciasdb(1)
|
|
|
|
[Timer]
|
|
# Run daily at 02:00 UTC with up to 5-minute random jitter to avoid
|
|
# thundering-herd on systems with many services.
|
|
OnCalendar=*-*-* 02:00:00 UTC
|
|
RandomizedDelaySec=5min
|
|
# Run immediately on boot if the last scheduled run was missed
|
|
# (e.g. host was offline at 02:00).
|
|
Persistent=true
|
|
|
|
[Install]
|
|
WantedBy=timers.target
|