💾 Backup all PostgreSQL databases to S3 Storage
$ docker run \
-e POSTGRES_HOST=localhost
-e POSTGRES_USER=postgres
-e POSTGRES_PASSWORD=postgrespw
-e S3_ENDPOINT=http://localhost:9000
-e S3_ACCESS_KEY=accessKey
-e S3_SECRET_KEY=secretKey
-e S3_BUCKET=backups
-e ENCRYPTION_PASSWORD=supersecretpassword
--rm
nikitakoschelenko/postgres2s3Host of the PostgreSQL database.
Port of the PostgreSQL database. Default to 5432.
Username of the PostgreSQL user.
Password of the PostgreSQL user.
Endpoint URL of the S3.
Access key of the S3.
Secret key of the S3.
Name of the bucket for saving backups to S3.
Prefix for the backup file name for saving to S3. Default to backup-.
Password for encryption.
Extra options for pg_dumpall command.
Extra options for openssl enc command.
Extra options for aws s3 cp command.
openssl enc -d -aes-256-cbc -pbkdf2 -iter 20000 -in backup.bak.gz.enc -out backup.bak.gzTo use with Kubernetes, you need to create a CronJob:
apiVersion: batch/v1
kind: CronJob
metadata:
name: postgresql-backup
namespace: shared
spec:
# at minute 0 past every 8th hour
schedule: 0 */8 * * *
jobTemplate:
spec:
template:
spec:
containers:
- name: postgresql-backup
image: nikitakoschelenko/postgres2s3:15.1-rc.1
# use envFrom to load Secrets and ConfigMaps into environment variables
envFrom:
- configMapRef:
name: postgresql-backup-configmap
- secretRef:
name: postgresql-backup-secret
restartPolicy: OnFailureUse config map for not-secret configuration data:
apiVersion: v1
kind: ConfigMap
metadata:
name: postgresql-backup-configmap
namespace: shared
data:
POSTGRES_HOST: postgresql.shared
S3_ENDPOINT: http://minio.shared:9000/
S3_BUCKET: backups
S3_FILE_PREFIX: postresql/backup-Use secrets for things which are actually secret:
apiVersion: v1
kind: Secret
metadata:
name: postgresql-backup-secret
namespace: shared
type: Opaque
data:
# base64 encode the values stored in a Kubernetes Secret: $ pbpaste | base64 | pbcopy
# the --decode flag is convenient: $ pbpaste | base64 --decode
POSTGRES_USER: cG9zdGdyZXM=
POSTGRES_PASSWORD: cG9zdGdyZXNwdw==
S3_ACCESS_KEY: YWNjZXNzS2V5
S3_SECRET_KEY: c2VjcmV0S2V5
ENCRYPTION_PASSWORD: c3VwZXJzZWNyZXRwYXNzd29yZA==