# infra/authentik/backup/crontab
#
# Daily Authentik backup. Times are UTC (TZ set in the Dockerfile).
# Format: m h dom mon dow command
#
# 03:30 UTC = quiet hour for both EU/US active windows. Authentik's worker
# doesn't have a heavy nightly job; we co-locate with the Sentry backup time
# (which also runs at 03:30 in infra/sentry/backup/crontab) for consistent
# operator runbooks.

30 3 * * * /srv/backup/backup.sh >> /srv/backup/logs/backup-$(date -u +\%Y\%m\%d).log 2>&1

# Heartbeat — write an "alive" marker hourly so operators can confirm crond
# is actually running inside the container.
0  * * * * date -u +%Y-%m-%dT%H:%M:%SZ > /srv/backup/logs/heartbeat.txt