78 lines
2.4 KiB
Bash
78 lines
2.4 KiB
Bash
|
#!/bin/bash
|
||
|
|
# Backup Vaultwarden database in a Kubernetes environment.
|
||
|
|
# Usage: backup-database [OPTIONS] <destination>
|
||
|
|
|
||
|
|
usage() {
|
||
|
|
>&2 printf "Usage: %s <destination>\n" "${0}"
|
||
|
|
>&2 printf "Options:\n"
|
||
|
|
>&2 printf "\t-e \t Specify the environment file to use\n"
|
||
|
|
exit "${1:-1}"
|
||
|
|
}
|
||
|
|
|
||
|
|
# Get options
|
||
|
|
|
||
|
|
while getopts ":e:" option; do
|
||
|
|
case "${option}" in
|
||
|
|
e)
|
||
|
|
if ! [ -f "${OPTARG}" ]; then
|
||
|
|
>&2 printf "Error: Specified environment file does not exist: '%s'.\n" "${OPTARG}"
|
||
|
|
elif ! [ -r "${OPTARG}" ]; then
|
||
|
|
>&2 printf "Error: Specified environment file is not readable: '%s'.\n" "${OPTARG}"
|
||
|
|
fi
|
||
|
|
env_file="${OPTARG}"
|
||
|
|
;;
|
||
|
|
*)
|
||
|
|
>&2 printf "Error: Invalid option: '%s'.\n" "${option}"
|
||
|
|
usage
|
||
|
|
;;
|
||
|
|
esac
|
||
|
|
done
|
||
|
|
shift $(( OPTIND - 1 ))
|
||
|
|
|
||
|
|
# Check arguments
|
||
|
|
|
||
|
|
if [ $# -ne 1 ]; then
|
||
|
|
>&2 printf "Error: You need to specify a destination.\n"
|
||
|
|
usage
|
||
|
|
elif ! [ -d "${1}" ]; then
|
||
|
|
>&2 printf "Error: Specified destination does not exist or is not readable : '%s'.\n" "${1}"
|
||
|
|
usage
|
||
|
|
else
|
||
|
|
destination="${1}"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Retrieve container names
|
||
|
|
base_container="$( docker ps --format '{{.Names}}' | grep -E 'vaultwarden-2_vaultwarden-2-[0-9a-z]{10}-[0-9a-z]{5}' )"
|
||
|
|
database_container="$( docker ps --format '{{.Names}}' | grep postgres_vaultwarden-2-cnpg-main-1 )"
|
||
|
|
|
||
|
|
if ! [[ -n "${base_container}" && -n "${database_container}" ]]; then
|
||
|
|
>&2 printf "Error: Not all containers could be found.\n"
|
||
|
|
exit 2
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Abort entire script if any command fails
|
||
|
|
set -e
|
||
|
|
|
||
|
|
# Database backup
|
||
|
|
|
||
|
|
# Filename for database backup
|
||
|
|
database_backupfile="vaultwarden-sqlbkp_$(date +'%Y%m%d').bak"
|
||
|
|
host_database_backupfile="${destination}/${database_backupfile}"
|
||
|
|
|
||
|
|
# Create backup file in docker container
|
||
|
|
echo 'Backing up database'
|
||
|
|
docker exec --env-file "${env_file:=.env}" "${database_container}" pg_dump 'vaultwarden' -cwv -h 'localhost' -U 'vaultwarden' > "${host_database_backupfile}"
|
||
|
|
|
||
|
|
# Files backup
|
||
|
|
for file in 'attachments' 'sends' 'rsa_key.pem' 'rsa_key.pub.pem'; do # 'config.json'
|
||
|
|
printf 'Copying %s\n' "${file}"
|
||
|
|
docker cp -a "${base_container}":"/data/${file}" "${destination}"
|
||
|
|
done
|
||
|
|
|
||
|
|
# Backup cleanup
|
||
|
|
# Only keep 30 days of backups, seems about right.
|
||
|
|
echo 'Cleaning up old database backups'
|
||
|
|
find "${destination}" -name '*sqlbkp*' -type f -mtime +30 -print -delete
|
||
|
|
|
||
|
|
echo 'Done'
|