Want to skip the self-assembly, and have Joplin INSTANTLY "Just Work™"?
ElfHosted is an open-source app hosting platform (geek-cookbook-as-a-service), crafted with love by @funkypenguin - get your ElfHosted instance of Joplin now!
joplin-server is a free open-source backup solution based on RSync/RSnapshot. It's basically a web wrapper around rsync/rsnapshot, which means that your backups are just files on a filesystem, utilising hardlinks for tracking incremental changes. I find this result more reassuring than a blob of compressed, (encrypted?) data that more sophisticated backup solutions would produce for you.
Create /var/data/config/joplin-server/joplin-server.env, and populate with the following variables
SYMFONY__DATABASE__PASSWORD=password
EB_CRON=enabled
TZ='Etc/UTC'#SMTP - Populate these if you want email notifications#SYMFONY__MAILER__HOST=#SYMFONY__MAILER__USER=#SYMFONY__MAILER__PASSWORD=#SYMFONY__MAILER__FROM=# For mysqlMYSQL_ROOT_PASSWORD=password
Create /var/data/config/joplin-server/joplin-server-db-backup.env, and populate with the following, to setup the nightly database dump.
Note
Running a daily database dump might be considered overkill, since joplin-server can be configured to backup its own database. However, making my own backup keeps the operation of this stack consistent with other stacks which employ MariaDB.
Also, did you ever hear about the guy who said "_I wish I had fewer backups"?
No, me either
# For database backup (keep 7 days daily backups)MYSQL_PWD=<sameasSYMFONY__DATABASE__PASSWORDabove>
MYSQL_USER=root
BACKUP_NUM_KEEP=7BACKUP_FREQUENCY=1d
Joplin Server Docker Swarm config
Create a docker swarm config file in docker-compose syntax (v3), something like the example below:
Fast-track with premix! 🚀
"Premix" is a git repository which includes necessary docker-compose and env files for all published recipes. This means that you can launch any recipe with just a git pull and a docker stack deploy 👍.
🚀 Update: Premix now includes an ansible playbook, enabling you to deploy an entire stack + recipes, with a single ansible command! (more here)
version:"3"services:db:image:mariadb:10.4env_file:/var/data/config/joplin-server/joplin-server.envnetworks:-internalvolumes:-/etc/localtime:/etc/localtime:ro-/var/data/runtime/joplin-server/db:/var/lib/mysqldb-backup:image:mariadb:10.4env_file:/var/data/config/joplin-server/joplin-server-db-backup.envvolumes:-/var/data/joplin-server/database-dump:/dump-/etc/localtime:/etc/localtime:roentrypoint:|bash -c 'bash -s <<EOFtrap "break;exit" SIGHUP SIGINT SIGTERMsleep 2mwhile /bin/true; domysqldump -h db --all-databases | gzip -c > /dump/dump_\`date +%d-%m-%Y"_"%H_%M_%S\`.sql.gz(ls -t /dump/dump*.sql.gz|head -n $$BACKUP_NUM_KEEP;ls /dump/dump*.sql.gz)|sort|uniq -u|xargs rm -- {}sleep $$BACKUP_FREQUENCYdoneEOF'networks:-internalapp:image:joplin-server/joplin-serverenv_file:/var/data/config/joplin-server/joplin-server.envnetworks:-internal-traefik_publicvolumes:-/etc/localtime:/etc/localtime:ro-/var/data/:/var/data-/var/data/joplin-server/backups:/app/backups-/var/data/joplin-server/uploads:/app/uploads-/var/data/joplin-server/sshkeys:/app/.sshdeploy:labels:# traefik common-traefik.enable=true-traefik.docker.network=traefik_public# traefikv1-traefik.frontend.rule=Host:joplin-server.example.com-traefik.port=80# traefikv2-"traefik.http.routers.joplin-server.rule=Host(`joplin-server.example.com`)"-"traefik.http.services.joplin-server.loadbalancer.server.port=80"-"traefik.enable=true"# Remove if you wish to access the URL directly-"traefik.http.routers.joplin-server.middlewares=forward-auth@file"networks:traefik_public:external:trueinternal:driver:overlayipam:config:-subnet:172.16.36.0/24
Note
Setup unique static subnets for every stack you deploy. This avoids IP/gateway conflicts which can otherwise occur when you're creating/removing stacks a lot. See my list here.
Serving
Launch joplin-server stack
Launch the joplin-server stack by running docker stack deploy joplin-server -c <path -to-docker-compose.yml>
Log into your new instance at https://YOUR-FQDN, with user "root" and the password default password "root":
First thing you do, change your password, using the gear icon, and "Change Password" link:
Have a read of the joplin-server Docs - they introduce the concept of clients (hosts containing data to be backed up), jobs (what data gets backed up), policies (when is data backed up and how long is it kept).
At the very least, you want to setup a client called "localhost" with an empty path (i.e., the job path will be accessed locally, without SSH), and then add a job to this client to backup /var/data, excluding/var/data/runtime and /var/data/joplin-server/backup (unless you like "backup-ception")
Copying your backup data offsite
From the WebUI, you can download a script intended to be executed on a remote host, to backup your backup data to an offsite location. This is a Good Idea™, but needs some massaging for a Docker swarm deployment.
Here's a variation to the standard script, which I've employed:
You'll note that I don't use the script to create a mysql dump (since Elkar is running within a container anyway), rather I just rely on the database dump which is made nightly into /var/data/joplin-server/database-dump/
Restoring data
Repeat after me : "It's not a backup unless you've tested a restore"
Note
I had some difficulty making restoring work well in the webUI. My attempts to "Restore to client" failed with an SSH error about "localhost" not found. I was able to download the backup from my web browser, so I considered it a successful restore, since I can retrieve the backed-up data either from the webUI or from the filesystem directly.
To restore files form a job, click on the "Restore" button in the WebUI, while on the Jobs tab:
This takes you to a list of backup names and file paths. You can choose to download the entire contents of the backup from your browser as a .tar.gz, or to restore the backup to the client. If you click on the name of the backup, you can also drill down into the file structure, choosing to restore a single file or directory.
Chef's notes 📓
If you wanted to expose the joplin-server UI directly, you could remove the traefik-forward-auth from the design. ↩
The original inclusion of joplin-server was due to the efforts of @gpulido in our Discord server. Thanks Gabriel! ↩
Tip your waiter (sponsor) 👏
Did you receive excellent service? Want to compliment the chef? (..and support development of current and future recipes!) Sponsor me on Github / Ko-Fi / Patreon, or see the contribute page for more (free or paid) ways to say thank you! 👏
Employ your chef (engage) 🤝
Is this too much of a geeky PITA? Do you just want results, stat? I do this for a living - I'm a full-time Kubernetes contractor, providing consulting and engineering expertise to businesses needing short-term, short-notice support in the cloud-native space, including AWS/Azure/GKE, Kubernetes, CI/CD and automation.
Want to know now when this recipe gets updated, or when future recipes are added? Subscribe to the RSS feed, or leave your email address below, and we'll keep you updated.