feat: add backblaze backups bucket

Author: glitchedmob

.github/workflows/tf-plan-apply.yml

@@ -28,6 +28,8 @@ jobs:
       envrc_content: |
         export TF_VAR_proxmox_endpoint="${{ secrets.TF_VAR_proxmox_endpoint }}"
         export TF_VAR_proxmox_api_token="${{ secrets.TF_VAR_proxmox_api_token }}"
+        export TF_VAR_b2_application_key_id="${{ secrets.TF_VAR_b2_application_key_id }}"
+        export TF_VAR_b2_application_key="${{ secrets.TF_VAR_b2_application_key }}"
       aws_role_arn: ${{ secrets.AWS_ROLE_ARN }}
 
   plan_apply:
@@ -40,6 +42,8 @@ jobs:
       envrc_content: |
         export TF_VAR_proxmox_endpoint="${{ secrets.TF_VAR_proxmox_endpoint }}"
         export TF_VAR_proxmox_api_token="${{ secrets.TF_VAR_proxmox_api_token }}"
+        export TF_VAR_b2_application_key_id="${{ secrets.TF_VAR_b2_application_key_id }}"
+        export TF_VAR_b2_application_key="${{ secrets.TF_VAR_b2_application_key }}"
       headscale_auth_key: ${{ secrets.HEADSCALE_AUTH_KEY }}
       aws_role_arn: ${{ secrets.AWS_ROLE_ARN }}
       output_encryption_key: ${{ secrets.OUTPUT_ENCRYPTION_KEY }}

.github/workflows/tf-plan.yml

@@ -20,6 +20,8 @@ jobs:
       envrc_content: |
         export TF_VAR_proxmox_endpoint="${{ secrets.TF_VAR_proxmox_endpoint }}"
         export TF_VAR_proxmox_api_token="${{ secrets.TF_VAR_proxmox_api_token }}"
+        export TF_VAR_b2_application_key_id="${{ secrets.TF_VAR_b2_application_key_id }}"
+        export TF_VAR_b2_application_key="${{ secrets.TF_VAR_b2_application_key }}"
       aws_role_arn: ${{ secrets.AWS_ROLE_ARN }}
 
   plan:
@@ -32,6 +34,8 @@ jobs:
       envrc_content: |
         export TF_VAR_proxmox_endpoint="${{ secrets.TF_VAR_proxmox_endpoint }}"
         export TF_VAR_proxmox_api_token="${{ secrets.TF_VAR_proxmox_api_token }}"
+        export TF_VAR_b2_application_key_id="${{ secrets.TF_VAR_b2_application_key_id }}"
+        export TF_VAR_b2_application_key="${{ secrets.TF_VAR_b2_application_key }}"
       headscale_auth_key: ${{ secrets.HEADSCALE_AUTH_KEY }}
       aws_role_arn: ${{ secrets.AWS_ROLE_ARN }}
       output_encryption_key: ${{ secrets.OUTPUT_ENCRYPTION_KEY }}

src/tf/.terraform.lock.hcl

@@ -0,0 +1,8 @@
+locals {
+  backup_bucket_name = "sgfdevs-vm-workloads-backups"
+}
+
+resource "b2_bucket" "backups" {
+  bucket_name = local.backup_bucket_name
+  bucket_type = "allPrivate"
+}

src/tf/backup.tf

@@ -7,3 +7,8 @@ provider "proxmox" {
 provider "aws" {
   region = var.aws_region
 }
+
+provider "b2" {
+  application_key_id = var.b2_application_key_id
+  application_key    = var.b2_application_key
+}

src/tf/providers.tf

@@ -14,3 +14,15 @@ variable "aws_region" {
   type        = string
   default     = "us-east-2"
 }
+
+variable "b2_application_key_id" {
+  description = "Backblaze B2 application key ID for Terraform bucket management"
+  type        = string
+  sensitive   = true
+}
+
+variable "b2_application_key" {
+  description = "Backblaze B2 application key for Terraform bucket management"
+  type        = string
+  sensitive   = true
+}

src/tf/variables.tf

@@ -10,6 +10,10 @@ terraform {
       source  = "hashicorp/aws"
       version = "~> 6.33"
     }
+    b2 = {
+      source  = "Backblaze/b2"
+      version = "~> 0.12"
+    }
     proxmox = {
       source  = "bpg/proxmox"
       version = "~> 0.97"