# Defaults for backup_manager. Override in workspace component declarations
# (infra/libre-wuji/components/backup_manager.ncl).

let version = import "version.ncl" in

{
  backup_manager = {
    name      = "backup-manager",
    namespace = "backup-system",
    mode      = 'cluster,

    daemon_replicas     = 1,
    daemon_image        = version.daemon_image,
    daemon_http_port    = 9099,
    daemon_metrics_port = 9100,

    mount_image         = version.mount_image,

    vault_endpoint      = "https://vault.libre-wuji.svc.cluster.local:8200",
    vault_bootstrap_secret_ref = "backup-manager-bootstrap",

    nats_url            = "nats://nats.ops-system.svc.cluster.local:4222",
    nats_topology_ref   = "infra/libre-wuji/backup-nats-topology.ncl",

    policies = {
      components_path      = "infra/libre-wuji/components/*.ncl",
      groups_path          = "infra/libre-wuji/backup-groups.ncl",
      system_backups_path  = "infra/libre-wuji/system-backups.ncl",
      verify_recipes_path  = "infra/libre-wuji/verify-recipes",
      nickel_import_path   = "/opt/provisioning",
    },

    concurrency = {
      max_parallel_backups          = 4,
      max_parallel_per_destination  = 2,
    },

    host_install = {
      binary_path = "/usr/local/bin/prvng-backup",
      cron_dir    = "/etc/cron.d",
      systemd_dir = "/etc/systemd/system",
      env_dir     = "/etc/prvng-backup",
    },

    requires = {
      storage     = { size = "5Gi", persistent = true },
      ports       = [
        { port = 9099, exposure = 'internal },
        { port = 9100, exposure = 'internal },
      ],
      credentials = [
        "VAULT_BOOTSTRAP_TOKEN",
        "NATS_BOOTSTRAP_NKEY_SEED",
        "BACKUP_AGE_KEY",
        "BACKUP_S3_PRIMARY_ACCESS_KEY",
        "BACKUP_S3_PRIMARY_SECRET_KEY",
        "BACKUP_B2_REPLICA_KEY_ID",
        "BACKUP_B2_REPLICA_APPLICATION_KEY",
      ],
    },

    provides = {
      service   = "backup-manager",
      port      = 9099,
      endpoints = ["/metrics", "/api/v1/policy", "/api/v1/queue"],
    },

    operations = {
      install = true,
      update  = true,
      delete  = true,
      health  = true,
      restart = true,
    },
  },
}