From 03c3196242bcf759f066f22a7b7737118a1344ae Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Sun, 25 Oct 2026 17:10:32 +0100
Subject: [PATCH] velero: back up to Garage instead of MinIO

---
 velero/nas-svc.yaml     | 10 ----------
 velero/velero-helm.yaml | 17 ++++++++---------
 2 files changed, 8 insertions(+), 19 deletions(-)
 delete mode 100644 velero/nas-svc.yaml

diff --git a/velero/nas-svc.yaml b/velero/nas-svc.yaml
deleted file mode 100644
index de49f87..0000000
--- a/velero/nas-svc.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: nas-minio-external
-spec:
-  type: ExternalName
-  externalName: 192.168.1.99
-  ports:
-    - port: 9000
-      protocol: TCP
\ No newline at end of file
diff --git a/velero/velero-helm.yaml b/velero/velero-helm.yaml
index 4f70e68..63cf363 100644
--- a/velero/velero-helm.yaml
+++ b/velero/velero-helm.yaml
@@ -27,20 +27,22 @@ spec:
               - mountPath: /target
                 name: plugins
         configuration:
+          # Garage on the NAS (nas/garage). Until 2026-10-25 this was MinIO on
+          # the same NAS; the bucket was copied over with rclone, so the
+          # existing backups and kopia repositories carried on.
           backupStorageLocation:
             - name: default
               bucket: velero-backups
               provider: aws
               config:
-                region: minio
+                region: garage
                 s3ForcePathStyle: true
-                s3Url: http://192.168.1.99:9000
-                insecureSkipTLSVerify: "true"
+                s3Url: http://192.168.1.99:3900
           volumeSnapshotLocation:
             - name: default
               provider: aws
               config:
-                region: minio
+                region: garage
           features: EnableCSI
           # Kopia maintenance ran every hour for each of the 15 repositories,
           # and once a day as a full run of several minutes that writes its
@@ -59,11 +61,8 @@ spec:
                   memoryRequest: 256Mi
                   memoryLimit: 2Gi
         credentials:
-          # Use existing secret created by External Secrets Operator
-          # existingSecret: velero-minio-credentials
-          # extraEnvVars:
-          # AWS_SHARED_CREDENTIALS_FILE: /credentials/cloud
-          existingSecret: cloud-credentials
+          # From Vault, velero/external-secret.yaml
+          existingSecret: velero-s3-credentials
         deployNodeAgent: true
         nodeAgent:
           containerSecurityContext: