search

dreammall-earth / dreammall.earth

Dreammall.earth website & product page
https://dreammall-earth.github.io/dreammall.earth/
Apache License 2.0
6 stars 2 forks source link

💥 [DevOps] Backup/Restore Authentik #1588

Closed roschaefer closed 3 weeks ago

roschaefer commented 1 month ago

💥 DevOps

If we want to use our previous user accounts for in a deployment like #1451 we need to be able to export these user accounts and groups and restore them to a different authentik instance.

This is the equivalent of a backup/restore of Authentik. Have we ever tested that? (A backup strategy that has not been tested, is not a backup strategy).

Implementation details

There are two ways to accomplish this:

  1. A dump of postgresql
  2. Export all objects as blueprints with ak export_blueprint, See docs

In both ways, we produce a file that needs to be downloaded. We need SSH access to download this file. Someone who has got SSH access already needs to publish the public SSH keys of the team to https://auth.dreammall.earth.

ulfgebhardt commented 4 weeks ago

@roschaefer is this still a thing?

roschaefer commented 4 weeks ago

@roschaefer is this still a thing?

We talked in our pair-programming about this. It's still a thing for the currently used authentik instance. Maybe you can arrange SSH access for authentik on Friday.

roschaefer commented 3 weeks ago

We discussed this internally. I was able to download and restore user accounts to a local authentik instance. I've sent a README.md in our discord (because we don't want to publish it). This can be closed.