mirror of
https://github.com/xCyanGrizzly/DragonsStash.git
synced 2026-09-21 13:31:42 +00:00
adminandClaude Opus 4.8
2e7e6cca9b
Wire the backup service against the Synology share over SMB/CIFS (the NAS authenticates with a user/password; NFS is IP-allowlist only). Also fixes three defects found bringing the service up live: - entrypoint crash-loop: dcron's crond fails "setpgid: Operation not permitted" in this runtime -> use busybox crond; make repo-init idempotent (check via `restic cat config`, tolerate init-on-existing) so a transient CIFS/lock hiccup can't kill PID 1. - OOM: pg_dump of a ~276MB DB + tar + restic exceeded the 256M cap -> 1G. - live tar abort: GNU tar exits 1 when TDLib files change mid-read (worker is live); per design this is best-effort, so tolerate exit 1, fatal only >=2. Kuma push is now optional (empty URL disables alerting) since it's deferred. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
33 lines
1008 B
Bash
33 lines
1008 B
Bash
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
report_failure() {
|
|
[ -n "${KUMA_PUSH_URL:-}" ] || return 0
|
|
curl -fsS "$KUMA_PUSH_URL" --get \
|
|
--data-urlencode "status=down" \
|
|
--data-urlencode "msg=$BASH_COMMAND failed" || true
|
|
}
|
|
trap report_failure ERR
|
|
|
|
DUMP_FILE=/tmp/dragonsstash.dump
|
|
TAR_FILE=/tmp/tdlib.tar.gz
|
|
|
|
trap 'rm -f "$DUMP_FILE" "$TAR_FILE"' EXIT
|
|
|
|
pg_dump -h dragonsstash-db -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Fc -f "$DUMP_FILE"
|
|
|
|
# TDLib volumes are tarred live (best-effort, per design). A file changing
|
|
# mid-read makes GNU tar exit 1 (warning) — that is expected here and must not
|
|
# abort the backup. Only a genuine error (exit >= 2) is fatal.
|
|
tar --warning=no-file-changed -czf "$TAR_FILE" -C /data tdlib-worker tdlib-bot \
|
|
|| { rc=$?; [ "$rc" -le 1 ] || exit "$rc"; }
|
|
|
|
restic backup "$DUMP_FILE" "$TAR_FILE"
|
|
restic forget --keep-daily 14 --prune
|
|
|
|
if [ -n "${KUMA_PUSH_URL:-}" ]; then
|
|
curl -fsS "$KUMA_PUSH_URL" --get \
|
|
--data-urlencode "status=up" \
|
|
--data-urlencode "msg=OK"
|
|
fi
|