Bastian de Byl
5776dbe1bf
ups role: NUT server on home.debyl.io for the CyberPower PR1500RT2U that backs both it and truenas.localdomain, with staged shutdown (TrueNAS sheds at t+2min, host at 10% charge) and best-effort IPMI power-on when mains returns. The 10% threshold leans on ignorelb + override.battery.charge.low rather than a custom poller, because CyberPower asserts its own low-battery flag far too early. Credentials come from vault vars; nothing sensitive is templated in the clear. Nextcloud background jobs: both instances have backgroundjobs_mode "cron", which expects an external caller every ~5 minutes, and nothing was calling. The personal instance had not run a background job since 2026-05-14 and skudak since 2024-11-20. Consequently trash and file versions never expired, stale chunked uploads accumulated, calendar reminders never fired, and nextcloud.log was never rotated -- which quietly made the existing log_rotate_size cap inert. Added a systemd timer per instance, skipping cleanly when the container is down or in maintenance so deploy windows don't show up as failed units. Trash retention on the personal instance: the default "auto" only expires when disk space demands it, so 66 GB of >30-day deletions sat on a host with 1.3 TB free -- effectively unbounded. "auto, 30" makes the 30-day expiry unconditional while still purging early under pressure. Image bumps: nextcloud 33.0.0 -> 34.0.2 (both cloud and skudak-cloud) greg-time-bot 3.9.25 -> 3.10.0 fulfillr 20260723.2044 -> 20260728.2155 (prod and dev) The fulfillr bump records what is already deployed: both containers were rolled to that image on 2026-07-29 for SCRUM-156 (digital product releases + customer update campaign). Committing it keeps the repo from claiming an older tag than the host is actually running, which would otherwise roll fulfillr backwards on the next clean-checkout deploy. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
52 lines
1.9 KiB
Django/Jinja
52 lines
1.9 KiB
Django/Jinja
#!/bin/bash
|
|
# {{ ansible_managed }}
|
|
# Nextcloud "{{ cron_name }}" background jobs (cron.php).
|
|
#
|
|
# backgroundjobs_mode is "cron" on both instances, which means Nextcloud
|
|
# expects an external caller to run cron.php every ~5 minutes. Nothing was:
|
|
# the personal instance had not run a background job since 2026-05-14 and
|
|
# skudak since 2024-11-20. Without it Nextcloud never expires trash or file
|
|
# versions, never cleans stale chunked uploads, never sends calendar
|
|
# reminders, and -- easy to miss -- never rotates nextcloud.log, which makes
|
|
# the log_rotate_size cap set in containers/*/cloud.yml inert.
|
|
set -euo pipefail
|
|
|
|
TAG=nextcloud-cron
|
|
INSTANCE={{ cron_name }}
|
|
|
|
log() { logger -t "$TAG" -p daemon.info -- "instance=$INSTANCE $*"; }
|
|
fail() { logger -t "$TAG" -p daemon.err -- "instance=$INSTANCE status=failed $*"
|
|
echo "$TAG: FAILED: $*" >&2; exit 1; }
|
|
|
|
# The Nextcloud containers are ROOTLESS podman owned by "{{ podman_user }}",
|
|
# but this script runs as root under systemd. Same sudo/cd/XDG_RUNTIME_DIR
|
|
# preamble as cloud-backup.sh -- see CLAUDE.md for why `cd;` is required.
|
|
pexec() {
|
|
sudo -H -u {{ podman_user }} bash -c \
|
|
'cd; d=/run/user/$(id -u); [ -d "$d" ] && export XDG_RUNTIME_DIR="$d"
|
|
exec podman "$@"' _ "$@"
|
|
}
|
|
|
|
# A container that is down (deploy, image bump, host reboot) is not a failure
|
|
# worth flagging -- the next tick picks it up five minutes later.
|
|
if ! pexec container exists {{ cron_container }} 2>/dev/null; then
|
|
log "status=skipped reason=container-absent"
|
|
exit 0
|
|
fi
|
|
|
|
# occ and cron.php both refuse to do anything useful mid-upgrade. Skipping
|
|
# keeps a deploy window from parading as a run of failed units.
|
|
if pexec exec -u www-data {{ cron_container }} php occ status 2>/dev/null \
|
|
| grep -q 'maintenance: true'; then
|
|
log "status=skipped reason=maintenance"
|
|
exit 0
|
|
fi
|
|
|
|
set +e
|
|
pexec exec -u www-data {{ cron_container }} php -f /var/www/html/cron.php
|
|
rc=$?
|
|
set -e
|
|
[ "$rc" -eq 0 ] || fail "cron.php exited $rc"
|
|
|
|
log "status=ok"
|