Initial commit

scripts/backup.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+# Backs up the Notizarr Postgres database (which holds everything, including
+# the VAPID keypair and session secret — see docs/phase1/06-docker-unraid-design.md)
+# plus the compose file itself (env vars, including secrets, are inline
+# there rather than in a separate .env), into the backups/ directory.
+#
+# Run from the deployment root (e.g. /mnt/tank/appdata/notizarr):
+#   ./scripts/backup.sh
+#
+# Or point it at a different container/compose file:
+#   POSTGRES_CONTAINER=notizarr-postgres COMPOSE_FILE=docker/docker-compose.prod.yml ./scripts/backup.sh
+set -euo pipefail
+
+POSTGRES_CONTAINER="${POSTGRES_CONTAINER:-notizarr-postgres-dev}"
+POSTGRES_USER="${POSTGRES_USER:-notizarr}"
+POSTGRES_DB="${POSTGRES_DB:-notizarr}"
+COMPOSE_FILE="${COMPOSE_FILE:-docker/docker-compose.yml}"
+BACKUP_DIR="${BACKUP_DIR:-backups}"
+TIMESTAMP="$(date +%Y%m%d-%H%M%S)"
+
+if [ ! -f "$COMPOSE_FILE" ]; then
+  echo "Error: $COMPOSE_FILE not found. Run this from the deployment root (e.g. /mnt/tank/appdata/notizarr)." >&2
+  exit 1
+fi
+
+mkdir -p "$BACKUP_DIR"
+
+DB_DUMP="$BACKUP_DIR/notizarr-db-$TIMESTAMP.sql.gz"
+echo "Dumping database from container $POSTGRES_CONTAINER to $DB_DUMP ..."
+docker exec -t "$POSTGRES_CONTAINER" pg_dump -U "$POSTGRES_USER" "$POSTGRES_DB" | gzip > "$DB_DUMP"
+
+COMPOSE_BACKUP="$BACKUP_DIR/notizarr-compose-$TIMESTAMP.yml.backup"
+echo "Copying $COMPOSE_FILE to $COMPOSE_BACKUP ..."
+cp "$COMPOSE_FILE" "$COMPOSE_BACKUP"
+chmod 600 "$COMPOSE_BACKUP"
+
+# Keep the last 14 backups of each kind; a daily cron run this way holds
+# roughly two weeks without the directory growing unbounded.
+find "$BACKUP_DIR" -maxdepth 1 -name 'notizarr-db-*.sql.gz' -type f | sort -r | tail -n +15 | xargs -r rm --
+find "$BACKUP_DIR" -maxdepth 1 -name 'notizarr-compose-*.yml.backup' -type f | sort -r | tail -n +15 | xargs -r rm --
+
+echo "Done."
+echo "  $DB_DUMP"
+echo "  $COMPOSE_BACKUP"
+echo
+echo "Note: $COMPOSE_BACKUP contains the database password and OIDC client secret in plain text — keep backups/ off any shared or public storage."

scripts/restore.sh

@@ -0,0 +1,44 @@
+#!/usr/bin/env bash
+# Restores a Notizarr Postgres backup produced by scripts/backup.sh.
+# DESTRUCTIVE: drops and recreates all data in the target database.
+#
+# Run from the deployment root:
+#   ./scripts/restore.sh backups/notizarr-db-20260101-120000.sql.gz
+set -euo pipefail
+
+POSTGRES_CONTAINER="${POSTGRES_CONTAINER:-notizarr-postgres-dev}"
+POSTGRES_USER="${POSTGRES_USER:-notizarr}"
+POSTGRES_DB="${POSTGRES_DB:-notizarr}"
+COMPOSE_FILE="${COMPOSE_FILE:-docker/docker-compose.yml}"
+DUMP_FILE="${1:-}"
+
+if [ -z "$DUMP_FILE" ]; then
+  echo "Usage: $0 <path-to-backup.sql.gz>" >&2
+  exit 1
+fi
+if [ ! -f "$DUMP_FILE" ]; then
+  echo "Error: $DUMP_FILE not found." >&2
+  exit 1
+fi
+if [ ! -f "$COMPOSE_FILE" ]; then
+  echo "Error: $COMPOSE_FILE not found. Run this from the deployment root." >&2
+  exit 1
+fi
+
+echo "This will REPLACE all data in the '$POSTGRES_DB' database (container $POSTGRES_CONTAINER)."
+read -r -p "Type 'yes' to continue: " CONFIRM
+if [ "$CONFIRM" != "yes" ]; then
+  echo "Aborted."
+  exit 1
+fi
+
+echo "Stopping notizarr (keeping postgres running) ..."
+docker compose -f "$COMPOSE_FILE" stop notizarr
+
+echo "Restoring $DUMP_FILE ..."
+gunzip -c "$DUMP_FILE" | docker exec -i "$POSTGRES_CONTAINER" psql -U "$POSTGRES_USER" "$POSTGRES_DB"
+
+echo "Starting notizarr back up ..."
+docker compose -f "$COMPOSE_FILE" up -d notizarr
+
+echo "Done. Check logs: docker compose -f $COMPOSE_FILE logs notizarr --tail=50"