# apiVersion: batch/v1
# kind: CronJob
# metadata:
#   name: postgres-backup-dev
#   namespace: default
# spec:
#   schedule: "30 18 * * 5" # weekly Friday 18:30
#   jobTemplate:
#     spec:
#       template:
#         spec:
#           restartPolicy: OnFailure
#           containers:
#             - name: backup
#               image: postgres:16
#               command:
#                 - /bin/sh
#                 - -c
#                 - |
#                   pg_dump \
#                     -h postgres-dev.default.svc.cluster.local \
#                     -U $POSTGRES_USER \
#                     stripe_invoice \
#                   | gzip \
#                   | aws s3 cp - s3://$S3_BUCKET/dev/stripe_invoice/$(date +%F).sql.gz
#               envFrom:
#                 - secretRef:
#                     name: postgres-secret        # DEV DB creds
#                 - secretRef:
#                     name: aws-backup-secret     # shared AWS creds

# ---

# apiVersion: batch/v1
# kind: CronJob
# metadata:
#   name: postgres-backup-prod
#   namespace: default
# spec:
#   schedule: "30 01 * * *" # daily at 01:30 (recommended for prod)
#   jobTemplate:
#     spec:
#       template:
#         spec:
#           restartPolicy: OnFailure
#           containers:
#             - name: backup
#               image: postgres:16
#               command:
#                 - /bin/sh
#                 - -c
#                 - |
#                   pg_dump \
#                     -h postgres-prod.default.svc.cluster.local \
#                     -U $POSTGRES_USER \
#                     stripe_invoice \
#                   | gzip \
#                   | aws s3 cp - s3://$S3_BUCKET/prod/stripe_invoice/$(date +%F).sql.gz
#               envFrom:
#                 - secretRef:
#                     name: postgres-prod-secret  # PROD DB creds
#                 - secretRef:
#                     name: aws-backup-secret     # shared AWS creds