feat: add data/external for external data to backup

docs/maintain/backup.rst

@@ -168,6 +168,7 @@ Sync directories
 Backup script
   `sync-to-s3.sh <https://github.com/open-contracting/deploy/blob/main/salt/aws/files/sync-to-s3.sh>`__ copies directories directly into S3.
 Servers
+  -  ``kingfisher-main``
   -  ``registry``
 Test
   .. code-block:: bash

pillar/kingfisher_main.sls

@@ -88,6 +88,12 @@ backup:
     /home/incremental/data/:
     /home/incremental/logs/:
 
+sync:
+  location: ocp-external-backup/file-sync
+  directories:
+    # Must match directory in salt/kingfisher/init.sls
+    /data/external:
+
 apache:
   public_access: True
   modules:

salt/kingfisher/init.sls

@@ -1,9 +1,21 @@
 {% from 'lib.sls' import create_user %}
 
+include:
+  - docker
+
 {% for user, authorized_keys in pillar.users|items %}
 {{ create_user(user, authorized_keys=authorized_keys) }}
 {% endfor %}
 
+# Must match directory in kingfisher_main.sls.
+/data/external:
+  file.directory:
+    - user: {{ pillar.docker.user }}
+    - group: {{ pillar.docker.user }}
+    - makedirs: True
+    - require:
+      - user: {{ pillar.docker.user }}_user_exists
+
 useful commands for data support:
   pkg.installed:
     - pkgs: