mirror of
https://github.com/xCyanGrizzly/DragonsStash.git
synced 2026-09-21 05:21:43 +00:00
113 lines
2.7 KiB
Bash
Executable File
113 lines
2.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -Eeuo pipefail
|
|
|
|
readonly LOCK_FILE="/run/lock/dragons-stash-backup.lock"
|
|
readonly BACKUP_CONTAINER_ROOT="/backup"
|
|
readonly -a MANAGED_SERVICES=(app worker bot)
|
|
|
|
declare -a RUNNING_SERVICES=()
|
|
|
|
require_value() {
|
|
local name="$1"
|
|
|
|
if [[ -z "${!name:-}" ]]; then
|
|
printf 'Required environment variable %s is not set.\n' "$name" >&2
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
validate_environment() {
|
|
require_value BACKUP_MOUNT_PATH
|
|
require_value BACKUP_STAGING_PATH
|
|
require_value BACKUP_RESTIC_PASSWORD_FILE
|
|
require_value BACKUP_RETENTION_DAYS
|
|
}
|
|
|
|
validate_backup_repository() {
|
|
local repository="${BACKUP_REPOSITORY:-/backup/restic}"
|
|
local canonical_repository
|
|
|
|
canonical_repository="$(realpath -ms -- "$repository")"
|
|
if [[ "$canonical_repository" == "$BACKUP_CONTAINER_ROOT" || "$canonical_repository" != "$BACKUP_CONTAINER_ROOT"/* ]]; then
|
|
printf 'BACKUP_REPOSITORY must be strictly below /backup; got %s.\n' "$repository" >&2
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
validate_backup_mount() {
|
|
local probe_file
|
|
|
|
if ! mountpoint --q "$BACKUP_MOUNT_PATH"; then
|
|
printf 'Backup mount %s is not an active mountpoint.\n' "$BACKUP_MOUNT_PATH" >&2
|
|
return 1
|
|
fi
|
|
|
|
if ! probe_file="$(mktemp "$BACKUP_MOUNT_PATH/.dragons-stash-backup-write-probe.XXXXXX")"; then
|
|
printf 'Backup mount %s is not writable.\n' "$BACKUP_MOUNT_PATH" >&2
|
|
return 1
|
|
fi
|
|
|
|
if ! rm -f -- "$probe_file"; then
|
|
printf 'Unable to remove writable probe %s.\n' "$probe_file" >&2
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
capture_running_services() {
|
|
local service
|
|
local container_ids
|
|
|
|
for service in "${MANAGED_SERVICES[@]}"; do
|
|
if ! container_ids="$(docker compose ps --status running -q "$service")"; then
|
|
printf 'Unable to determine whether Compose service %s is running.\n' "$service" >&2
|
|
return 1
|
|
fi
|
|
|
|
if [[ -n "$container_ids" ]]; then
|
|
RUNNING_SERVICES+=("$service")
|
|
fi
|
|
done
|
|
}
|
|
|
|
restart_running_services() {
|
|
local exit_code=$?
|
|
local restart_exit=0
|
|
|
|
trap - EXIT
|
|
|
|
if ((${#RUNNING_SERVICES[@]} > 0)); then
|
|
docker compose start "${RUNNING_SERVICES[@]}" || restart_exit=$?
|
|
if ((restart_exit != 0)); then
|
|
printf 'Failed to restart one or more previously running services: %s\n' "${RUNNING_SERVICES[*]}" >&2
|
|
if ((exit_code == 0)); then
|
|
exit_code="$restart_exit"
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
exit "$exit_code"
|
|
}
|
|
|
|
main() {
|
|
validate_environment
|
|
validate_backup_repository
|
|
|
|
exec 9>"$LOCK_FILE"
|
|
if ! flock -n 9; then
|
|
printf "%s\n" "Another Dragon's Stash backup is already running." >&2
|
|
return 1
|
|
fi
|
|
|
|
validate_backup_mount
|
|
capture_running_services
|
|
trap restart_running_services EXIT
|
|
|
|
if ((${#RUNNING_SERVICES[@]} > 0)); then
|
|
docker compose stop "${RUNNING_SERVICES[@]}"
|
|
fi
|
|
|
|
docker compose --profile backup run --rm backup backup
|
|
}
|
|
|
|
main "$@"
|