adam/forgejo
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/forgejo.git synced 2026-09-30 05:23:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix backup strategy bug findings

Browse source
This commit is contained in:
Cursor Agent 2026-05-13 22:31:23 +00:00
parent fa51085578
commit b9726e5176
No known key found for this signature in database
2 changed files with 16 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
lambda/backup-verification/app.py
View file

@ -199,7 +199,13 @@ def handler(event, context):
blocks.append({"type": "section", "text": {"type": "mrkdwn", "text": f"*Overall:* {overall}"}})
else:
raise ValueError(f"Unknown mode: {mode!r} (expected 'daily' or 'restore-test')")
return {
"statusCode": 400,
"body": json.dumps({
"mode": mode,
"error": f"Unsupported backup verification mode: {mode}",
}),
}
_post_slack(blocks)

18
lib/forgejo-stack.ts
View file

@ -2,6 +2,7 @@ import * as cdk from "aws-cdk-lib";
import * as ec2 from "aws-cdk-lib/aws-ec2";
import * as iam from "aws-cdk-lib/aws-iam";
import * as s3 from "aws-cdk-lib/aws-s3";
import * as secretsmanager from "aws-cdk-lib/aws-secretsmanager";
import * as elbv2 from "aws-cdk-lib/aws-elasticloadbalancingv2";
import * as elbv2_targets from "aws-cdk-lib/aws-elasticloadbalancingv2-targets";
import * as route53 from "aws-cdk-lib/aws-route53";
@ -145,16 +146,15 @@ export class ForgejoStack extends cdk.Stack {
user: gcsTransferUser,
});
new cdk.aws_secretsmanager.CfnSecret(this, "GcsTransferCredentials", {
name: "forgejo/gcs-transfer-credentials",
secretString: cdk.Fn.join("", [
'{"accessKeyId":"',
gcsTransferKey.accessKeyId,
'","secretAccessKey":"',
gcsTransferKey.secretAccessKey.unsafeUnwrap(),
'"}',
]),
const gcsTransferCredentials = new secretsmanager.Secret(this, "GcsTransferCredentials", {
secretName: "forgejo/gcs-transfer-credentials",
secretObjectValue: {
accessKeyId: cdk.SecretValue.unsafePlainText(gcsTransferKey.accessKeyId),
secretAccessKey: gcsTransferKey.secretAccessKey,
},
});
const gcsTransferCredentialsResource = gcsTransferCredentials.node.defaultChild as secretsmanager.CfnSecret;
gcsTransferCredentialsResource.overrideLogicalId("GcsTransferCredentials");
const userData = ec2.UserData.forLinux();
userData.addCommands(