💾 Backup all PostgreSQL databases to S3 Storage
$ docker run \ -e POSTGRES_HOST=localhost -e POSTGRES_USER=postgres -e POSTGRES_PASSWORD=postgrespw -e S3_ENDPOINT=http://localhost:9000 -e S3_ACCESS_KEY=accessKey -e S3_SECRET_KEY=secretKey -e S3_BUCKET=backups -e ENCRYPTION_PASSWORD=supersecretpassword --rm nikitakoschelenko/postgres2s3Host of the PostgreSQL database.
Port of the PostgreSQL database. Default to 5432.
Username of the PostgreSQL user.
Password of the PostgreSQL user.
Endpoint URL of the S3.
Access key of the S3.
Secret key of the S3.
Name of the bucket for saving backups to S3.
Prefix for the backup file name for saving to S3. Default to backup-.
Password for encryption.
Extra options for pg_dumpall command.
Extra options for openssl enc command.
Extra options for aws s3 cp command.
openssl enc -d -aes-256-cbc -pbkdf2 -iter 20000 -in backup.bak.gz.enc -out backup.bak.gzTo use with Kubernetes, you need to create a CronJob:
apiVersion: batch/v1 kind: CronJob metadata: name: postgresql-backup namespace: shared spec: # at minute 0 past every 8th hour schedule: 0 */8 * * * jobTemplate: spec: template: spec: containers: - name: postgresql-backup image: nikitakoschelenko/postgres2s3:15.1-rc.1 # use envFrom to load Secrets and ConfigMaps into environment variables envFrom: - configMapRef: name: postgresql-backup-configmap - secretRef: name: postgresql-backup-secret restartPolicy: OnFailureUse config map for not-secret configuration data:
apiVersion: v1 kind: ConfigMap metadata: name: postgresql-backup-configmap namespace: shared data: POSTGRES_HOST: postgresql.shared S3_ENDPOINT: http://minio.shared:9000/ S3_BUCKET: backups S3_FILE_PREFIX: postresql/backup-Use secrets for things which are actually secret:
apiVersion: v1 kind: Secret metadata: name: postgresql-backup-secret namespace: shared type: Opaque data: # base64 encode the values stored in a Kubernetes Secret: $ pbpaste | base64 | pbcopy # the --decode flag is convenient: $ pbpaste | base64 --decode POSTGRES_USER: cG9zdGdyZXM= POSTGRES_PASSWORD: cG9zdGdyZXNwdw== S3_ACCESS_KEY: YWNjZXNzS2V5 S3_SECRET_KEY: c2VjcmV0S2V5 ENCRYPTION_PASSWORD: c3VwZXJzZWNyZXRwYXNzd29yZA==