infra/scripts/weekly-backup.service

[Unit]
Description=Daily backup: PVC snapshots + SQLite + pfsense to sda
After=network-online.target

[Service]
Type=oneshot
ExecStart=/usr/local/bin/weekly-backup
StandardOutput=journal
StandardError=journal
SyslogIdentifier=weekly-backup
TimeoutStartSec=3600
add 3-2-1 backup pipeline: weekly PVC file copy, NFS mirror, pfsense, offsite sync - weekly-backup.sh: mounts LVM thin snapshots ro, rsyncs files to /mnt/backup/pvc-data with --link-dest versioning (4 weeks). Also mirrors NFS backup dirs from TrueNAS, backs up pfsense (config.xml + full tar), PVE host config, and prunes >7d snapshots. - offsite-sync-backup.sh: rsync --files-from manifest to Synology (no full dir walk). Monthly full --delete sync on 1st Sunday. After=weekly-backup.service dependency. - lvm-pvc-snapshot.timer: changed to daily 03:00 (was 2x daily) - Prometheus alerts: WeeklyBackupStale, WeeklyBackupFailing, PfsenseBackupStale, OffsiteBackupSyncStale, BackupDiskFull. LVMSnapshotStale threshold 24h→48h. 2026-04-06 14:53:28 +03:00			`[Unit]`
switch backup + offsite sync from weekly to daily — RPO 7d → 1d [ci skip] - weekly-backup.timer: Sun 05:00 → daily 05:00 - offsite-sync-backup.timer: Sun 08:00 → daily 06:00 - Monthly full rsync --delete unchanged (1st-7th of month) - Total daily I/O cost: ~20GB sdc reads, ~3.5GB sda writes, seconds of network - Updated script headers and service descriptions Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> 2026-04-13 18:24:38 +00:00			`Description=Daily backup: PVC snapshots + SQLite + pfsense to sda`
add 3-2-1 backup pipeline: weekly PVC file copy, NFS mirror, pfsense, offsite sync - weekly-backup.sh: mounts LVM thin snapshots ro, rsyncs files to /mnt/backup/pvc-data with --link-dest versioning (4 weeks). Also mirrors NFS backup dirs from TrueNAS, backs up pfsense (config.xml + full tar), PVE host config, and prunes >7d snapshots. - offsite-sync-backup.sh: rsync --files-from manifest to Synology (no full dir walk). Monthly full --delete sync on 1st Sunday. After=weekly-backup.service dependency. - lvm-pvc-snapshot.timer: changed to daily 03:00 (was 2x daily) - Prometheus alerts: WeeklyBackupStale, WeeklyBackupFailing, PfsenseBackupStale, OffsiteBackupSyncStale, BackupDiskFull. LVMSnapshotStale threshold 24h→48h. 2026-04-06 14:53:28 +03:00			`After=network-online.target`

			`[Service]`
			`Type=oneshot`
			`ExecStart=/usr/local/bin/weekly-backup`
			`StandardOutput=journal`
			`StandardError=journal`
			`SyslogIdentifier=weekly-backup`
			`TimeoutStartSec=3600`