---
# CNPG replica cluster continuously replaying WAL from home's pg-nextcloud
# (apps/nextcloud/manifests/cnpg-cluster.yaml) via VPS MinIO's
# cnpg-backups/pg-nextcloud bucket path. Same pattern as the authentik/n8n
# VPS replica clusters - see infrastructure/vps-standby/authentik/
# manifests/cnpg-cluster.yaml for the full rationale.
#
# vps-minio-secret is a plain Secret copied here manually (kubectl, not
# git):
#   kubectl -n nextcloud create secret generic vps-minio-secret \
#     --from-literal=accesskey=<vps minio root user> \
#     --from-literal=secretkey=<vps minio root password>
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
  name: pg-nextcloud
  namespace: nextcloud
spec:
  imageName: ghcr.io/cloudnative-pg/postgresql:16
  instances: 1

  resources:
    requests:
      memory: "256Mi"
      cpu: "25m"
    limits:
      memory: "1Gi"
      cpu: "250m"

  storage:
    size: 20Gi
    storageClass: local-path

  bootstrap:
    recovery:
      source: home-backup

  externalClusters:
    - name: home-backup
      barmanObjectStore:
        destinationPath: s3://cnpg-backups/pg-nextcloud
        endpointURL: http://vps-minio.minio.svc.cluster.local:9000
        s3Credentials:
          accessKeyId:
            name: vps-minio-secret
            key: accesskey
          secretAccessKey:
            name: vps-minio-secret
            key: secretkey

  replica:
    enabled: true
    source: home-backup

  monitoring:
    enablePodMonitor: false