47 lines
2.0 KiB
Bash
47 lines
2.0 KiB
Bash
#!/usr/bin/env bash
|
|
# Backs up the Notizarr Postgres database (which holds everything, including
|
|
# the VAPID keypair and session secret — see docs/phase1/06-docker-unraid-design.md)
|
|
# plus the compose file itself (env vars, including secrets, are inline
|
|
# there rather than in a separate .env), into the backups/ directory.
|
|
#
|
|
# Run from the deployment root (e.g. /mnt/tank/appdata/notizarr):
|
|
# ./scripts/backup.sh
|
|
#
|
|
# Or point it at a different container/compose file:
|
|
# POSTGRES_CONTAINER=notizarr-postgres COMPOSE_FILE=docker/docker-compose.prod.yml ./scripts/backup.sh
|
|
set -euo pipefail
|
|
|
|
POSTGRES_CONTAINER="${POSTGRES_CONTAINER:-notizarr-postgres-dev}"
|
|
POSTGRES_USER="${POSTGRES_USER:-notizarr}"
|
|
POSTGRES_DB="${POSTGRES_DB:-notizarr}"
|
|
COMPOSE_FILE="${COMPOSE_FILE:-docker/docker-compose.yml}"
|
|
BACKUP_DIR="${BACKUP_DIR:-backups}"
|
|
TIMESTAMP="$(date +%Y%m%d-%H%M%S)"
|
|
|
|
if [ ! -f "$COMPOSE_FILE" ]; then
|
|
echo "Error: $COMPOSE_FILE not found. Run this from the deployment root (e.g. /mnt/tank/appdata/notizarr)." >&2
|
|
exit 1
|
|
fi
|
|
|
|
mkdir -p "$BACKUP_DIR"
|
|
|
|
DB_DUMP="$BACKUP_DIR/notizarr-db-$TIMESTAMP.sql.gz"
|
|
echo "Dumping database from container $POSTGRES_CONTAINER to $DB_DUMP ..."
|
|
docker exec -t "$POSTGRES_CONTAINER" pg_dump -U "$POSTGRES_USER" "$POSTGRES_DB" | gzip > "$DB_DUMP"
|
|
|
|
COMPOSE_BACKUP="$BACKUP_DIR/notizarr-compose-$TIMESTAMP.yml.backup"
|
|
echo "Copying $COMPOSE_FILE to $COMPOSE_BACKUP ..."
|
|
cp "$COMPOSE_FILE" "$COMPOSE_BACKUP"
|
|
chmod 600 "$COMPOSE_BACKUP"
|
|
|
|
# Keep the last 14 backups of each kind; a daily cron run this way holds
|
|
# roughly two weeks without the directory growing unbounded.
|
|
find "$BACKUP_DIR" -maxdepth 1 -name 'notizarr-db-*.sql.gz' -type f | sort -r | tail -n +15 | xargs -r rm --
|
|
find "$BACKUP_DIR" -maxdepth 1 -name 'notizarr-compose-*.yml.backup' -type f | sort -r | tail -n +15 | xargs -r rm --
|
|
|
|
echo "Done."
|
|
echo " $DB_DUMP"
|
|
echo " $COMPOSE_BACKUP"
|
|
echo
|
|
echo "Note: $COMPOSE_BACKUP contains the database password and OIDC client secret in plain text — keep backups/ off any shared or public storage."
|