WIP add restic backups

README.md

@@ -2,7 +2,22 @@
 
 [Authentik](https://goauthentik.io/) based SSO for our sevices.
 
-## Prerequisites - Server Setup
+## Table of Contents
+
+- [`sso.base23.de` - Base23 SSO for all services](#ssobase23de---base23-sso-for-all-services)
+  - [Table of Contents](#table-of-contents)
+  - [Prerequisites](#prerequisites)
+    - [Server Setup](#server-setup)
+    - [Base23 Docker registry login](#base23-docker-registry-login)
+  - [Installation](#installation)
+    - [Clone \& configure initially](#clone--configure-initially)
+    - [Fist run](#fist-run)
+  - [Upgrade](#upgrade)
+  - [Rebuild containers locally](#rebuild-containers-locally)
+
+## Prerequisites
+
+### Server Setup
 
 ```shell
 apt update \
@@ -29,16 +44,37 @@ apt update \
   && unset TEMP_DIR
 ```
 
+### Base23 Docker registry login
+
+```shell
+docker login -u gitlab+deploy-token-5 registry.git.base23.de
+```
+
 ## Installation
 
-Clone & configure initially:
+### Clone & configure initially
+
+1. [Create a Storage Box sub account](https://confluence.base23.de/pages/viewpage.action?pageId=27820074).
+2. Enter the username to `env.template`.
+3. Run the initial configuration script:  
 
 ```shell
 cd /root/apps \
   && git clone ssh://git@git.base23.de:222/base23/sso.base23.de.git \
   && cd sso.base23.de \
-  && ./scripts/init.sh \
-  && docker compose build --no-cache \
+  && ./scripts/init.sh
+```
+
+4. Use the generated SSH key and copy it to the Hetzner Storage box for backups:
+
+```shell
+ssh-copy-id -i ./data/restic/ssh/id_ed25519 -p 23 -s u291924-sub4@u291924.your-storagebox.de
+```
+
+### Fist run
+
+```shell
+docker compose build --no-cache \
     --build-arg BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ') \
     --build-arg SRC_REV=$(git rev-parse --short HEAD) \
   && docker compose up -d; docker compose logs -f