foundation/offsite-backup/Pulumi.yaml at 1bba311d60e6f9ecfad391bbb860040da4c9d2bc - olsitec/foundation - Forgejo: Beyond coding. We forge.

olsitec/foundation

Andreas Niemann db47037bdc feat(offsite-backup): olsitec-foundation bucket + scoped creds on home MinIO

CONTRACT_004 offsite target (ADR-004 'second self-hosted location'). @pulumi/minio
program (modeled on olsicloud4 modules/minio): bucket 'olsitec-foundation' +
scoped IAM user/policy + service account on minio.wob.olsitec.de:19000.

Verified: scoped SA can put/list/delete in its bucket, DENIED cross-bucket. Admin
creds + scoped creds via ENV/state only (gitignored), never committed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-30 20:34:55 +02:00

6 lines

222 B

YAML

Raw Blame History

 name: foundation-offsite-backup
 description: Offsite backup target — olsitec-foundation bucket + scoped creds on the home Synology MinIO (CONTRACT_004 offsite).
 runtime:
   name: nodejs
   options:
     packagemanager: bun