longhorn backup target

clusters/base/infra/longhorn/longhorn-system/helmrelease.yaml

@@ -29,8 +29,12 @@ spec:
       defaultDataPath: /var/lib/longhorn
       guaranteedEngineManagerCPU: 12
       guaranteedReplicaManagerCPU: 12
-      # если backup target ещё не настроен — оставь пустым, донастроишь позже через UI/CR
-      backupTarget: ""
+      # points at the in-cluster rclone proxy (clusters/base/infra/longhorn/s3-backup-proxy),
+      # which itself encrypts and forwards to the real Wasabi bucket. "longhorn-backups" is
+      # a virtual bucket the proxy creates on demand under the crypt remote - already exists.
+      # region is a dummy value; the real endpoint comes from AWS_ENDPOINTS in the secret below.
+      backupTarget: "s3://longhorn-backups@us-east-1/"
+      backupTargetCredentialSecret: longhorn-backup-target-secret
       # чтобы не разъезжались реплики при 3 нодах
       replicaSoftAntiAffinity: false
     persistence:
@@ -44,4 +48,4 @@ spec:
       resizerReplicaCount: 3
       snapshotterReplicaCount: 3
     ingress:
-      enabled: false             # у тебя уже есть Caddy/Traefik, заведёшь свой Ingress/IngressRoute отдельно
+      enabled: false # exposed via Traefik explicitly