global:
  logging:
    - type: syslog
      format: logfmt
      level: warn
  monitoring:
    - type: prometheus
      listen: ':9811'

jobs:
  - name: k6zrepl
    type: snap
    # "<" aka recursive, https://zrepl.github.io/configuration/filter_syntax.html
    filesystems:
      'nas/k6<': true
    snapshotting:
      type: periodic
      prefix: zrepl_
      interval: 1h
    pruning:
      keep:
        # Keep non-zrepl snapshots
        - type: regex
          negate: true
          regex: '^zrepl_'

        - type: last_n
          regex: "^zrepl_.*"
          count: 4
        - type: grid
          regex: "^zrepl_.*"
          grid: 4x1h | 6x4h | 3x1d | 2x7d

  - name: k6zrepl_offsite_src
    type: source
    send:
      encrypted: true # zfs native already-encrypted, filesystems not encrypted will log to error-level
    serve:
      type: tcp
      listen: "{{ansible_host}}:35566" # NAT-ed to 193.40.103.250
      clients: {
        "78.28.64.17": "offsite.k-space.ee",
      }
    filesystems:
        'nas/k6': true
    snapshotting: # handled by above job, separated for secuwurity (isolation of domains)
      type: manual