Backups

new Container(this, this.envAwareId("minecraft-backup-container"), {
  name: "minecraft-main-backup",
  dependsOn: [minecraftMainContainer],
  image: images.minecraftBackup.imageId,
  networksAdvanced: [network],
  restart: "unless-stopped",
  env: envs({
    BACKUP_METHOD: "restic",
    RESTIC_PASSWORD: this.secrets.RESTIC_PASSWORD,
    AWS_ACCESS_KEY_ID: this.secrets.CLOUDFLARE_ACCESS_KEY_ID,
    AWS_SECRET_ACCESS_KEY: this.secrets.CLOUDFLARE_SECRET_ACCESS_KEY,
    RESTIC_VERBOSE: true,
    RESTIC_REPOSITORY: `s3:https://${this.secrets.CLOUDFLARE_ACCOUNT_ID}.r2.cloudflarestorage.com/production/minecraft-main-backup`,
    RCON_HOST: "minecraft-main",
    RCON_PASSWORD: this.secrets.RCON_PASSWORD,
    EXCLUDES: "*.jar,cache,logs,*.tmp,bluemap",
    BACKUP_INTERVAL: "6h",
    PRUNE_RESTIC_RETENTION: "--keep-daily 7 --keep-weekly 4 --keep-monthly 3",
  }),
  volumes: [
    {
      hostPath: join(this.workdir, "minecraft-main"),
      containerPath: "/data",
      readOnly: true,
    },
  ],
});

new Container(this, this.envAwareId("mariadb-backup-container"), {
  name: "mariadb-backup",
  dependsOn: [mariadbContainer],
  image: "databack/mysql-backup",
  restart: "unless-stopped",
  networksAdvanced: [network],
  command: ["dump"],
  env: envs({
    DB_SERVER: "mariadb",
    DB_USER: "root",
    DB_PASS: this.secrets.MARIADB_PASSWORD,
    DB_DUMP_FREQUENCY: 360,
    DB_DUMP_TARGET: `s3://${this.secrets.R2_BUCKET_NAME}/mariadb-backup`,
    AWS_ACCESS_KEY_ID: this.secrets.CLOUDFLARE_ACCESS_KEY_ID,
    AWS_SECRET_ACCESS_KEY: this.secrets.CLOUDFLARE_SECRET_ACCESS_KEY,
    AWS_REGION: "auto",
    AWS_ENDPOINT_URL: `https://${this.secrets.CLOUDFLARE_ACCOUNT_ID}.r2.cloudflarestorage.com`,
    DB_DUMP_COMPRESSION: "gzip",
    DB_DUMP_RETENTION: "14d",
    DB_DEBUG: true,
  }),
});

{
  oyasaiDockerTools,
  dockerTools,
  stdenv,
}:
let
  inherit (stdenv.hostPlatform) system;
  name = "mc-backup";
  imageName = "itzg/mc-backup";
  hashes = {
    "x86_64-linux" = "sha256-3g2ayNkXxJjaXuC8t7EMDTI9nMH2did75gB/nmNH2Aw=";
    "aarch64-linux" = "sha256-mzKgbyhuH0pMmzFuNKC/ltsDLzx0kfypTEY7XbVPPes=";
  };
in
oyasaiDockerTools.buildImage {
  inherit name;
  fromImage = dockerTools.pullImage {
    inherit imageName;
    imageDigest = "sha256:81e68ecbf7c3452079d08fc7058208cdf493633b4e7431d79d56bdb910c4dfea";
    hash = hashes.${system};
    finalImageName = imageName;
    finalImageTag = "latest";
  };
  config.Entrypoint = [ "/usr/bin/backup" ];
  config.Cmd = [ "loop" ];
  platforms = builtins.attrNames hashes;
}