adam/forgejo
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/forgejo.git synced 2026-10-02 12:03:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix restore runbook, DLM snapshot tagging, README cleanup, and gsutil prompt

Browse source
This commit is contained in:
Adam Moussa 2026-05-14 13:56:36 -04:00
parent bafb924cfc
commit 5cae537ee2
3 changed files with 6 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
README.md
View file

@ -8,7 +8,7 @@ Self-hosted Forgejo git server for archiving GitHub repos and mirroring active o
- **Network**: Private subnet (us-east-1a), behind `seahaven-com` ALB for SSL termination - **Network**: Private subnet (us-east-1a), behind `seahaven-com` ALB for SSL termination
- **DNS**: `forgejo.seahaven.com` — Route53 alias record pointing to the `seahaven-com` ALB (not a direct A record) - **DNS**: `forgejo.seahaven.com` — Route53 alias record pointing to the `seahaven-com` ALB (not a direct A record)
- **TLS**: Wildcard cert on ALB, HTTP internally on port 3000 - **TLS**: Wildcard cert on ALB, HTTP internally on port 3000
- **Backup**: Nightly `forgejo dump` to S3 + EBS snapshots via DLM (see [S3 Backups](#s3-backups)) - **Backup**: Nightly `forgejo dump` to S3 + EBS snapshots via DLM (see [3-2-1 Backup Strategy](#3-2-1-backup-strategy))
- **Admin access**: SSM Session Manager (no SSH port exposed) - **Admin access**: SSM Session Manager (no SSH port exposed)
- **CI/CD**: GitHub Actions with OIDC role `githubdeploy-forgejo` - **CI/CD**: GitHub Actions with OIDC role `githubdeploy-forgejo`
@ -74,6 +74,9 @@ cp app.ini /etc/forgejo/app.ini
cp gitea-db.sqlite3 /var/lib/forgejo/data/forgejo.db cp gitea-db.sqlite3 /var/lib/forgejo/data/forgejo.db
rm -rf /var/lib/forgejo/data/repositories rm -rf /var/lib/forgejo/data/repositories
cp -a repos /var/lib/forgejo/data/repositories cp -a repos /var/lib/forgejo/data/repositories
cp -a data/. /var/lib/forgejo/data/
[ -d lfs ] && cp -a lfs /var/lib/forgejo/data/lfs
[ -d custom ] && cp -a custom /var/lib/forgejo/custom
chown -R forgejo:forgejo /var/lib/forgejo /etc/forgejo/app.ini chown -R forgejo:forgejo /var/lib/forgejo /etc/forgejo/app.ini
systemctl start forgejo systemctl start forgejo
rm -rf /tmp/forgejo-restore /tmp/forgejo-<date>.tar.gz rm -rf /tmp/forgejo-restore /tmp/forgejo-<date>.tar.gz
@ -87,12 +90,6 @@ gsutil cp gs://forgejo-backups-offsite-seahaven/archive/<date>/forgejo-<date>.ta
# Then follow the same restore steps as S3 above # Then follow the same restore steps as S3 above
``` ```
To test the backup manually:
```bash
sudo /usr/local/bin/forgejo-backup.sh
```
## Autodiscovery ## Autodiscovery
An hourly cron job checks the `Sea-Haven-Industries` GitHub org for new repositories and mirrors them into Forgejo automatically. An hourly cron job checks the `Sea-Haven-Industries` GitHub org for new repositories and mirrors them into Forgejo automatically.

1
lib/forgejo-stack.ts
View file

@ -381,6 +381,7 @@ export class ForgejoStack extends cdk.Stack {
createRule: { interval: 24, intervalUnit: "HOURS", times: ["06:00"] }, createRule: { interval: 24, intervalUnit: "HOURS", times: ["06:00"] },
retainRule: { count: 30 }, retainRule: { count: 30 },
copyTags: true, copyTags: true,
tagsToAdd: [{ key: "forgejo-backup", value: "true" }],
}], }],
}, },
}); });

2
scripts/gcp-setup.sh
View file

@ -76,7 +76,7 @@ echo "Even the project owner cannot shorten or remove the policy."
echo "" echo ""
read -p "Lock the retention policy now? (yes/no): " CONFIRM read -p "Lock the retention policy now? (yes/no): " CONFIRM
if [ "$CONFIRM" = "yes" ]; then if [ "$CONFIRM" = "yes" ]; then
$GSUTIL retention lock "gs://$BUCKET_NAME" echo y | $GSUTIL retention lock "gs://$BUCKET_NAME"
echo "Retention policy LOCKED." echo "Retention policy LOCKED."
else else
echo "Retention policy set but NOT locked. Run 'gsutil retention lock gs://$BUCKET_NAME' when ready." echo "Retention policy set but NOT locked. Run 'gsutil retention lock gs://$BUCKET_NAME' when ready."