Hugo/backups/create_vaultwarden_backup.sh

#!/bin/bash
# Backup script for Vaultwarden in a kubernetes cluster

BACKUP_DEST="/mnt/PRIVATE_DOCS/BACKUPS/vaultwarden"
PASSFILE="./vaultwarden_pass.txt"

BACKUP_FILENAME=vaultwarden-sqlbkp_`date +"%Y%m%d"`.bak

# Retrieve container names
base_container=$( docker ps --format "{{.Names}}" | grep vaultwarden_vaultwarden )
database_container=$( docker ps --format "{{.Names}}" | grep vaultwarden-postgresql_vaultwarden-postgresql )

# Abort entire script if any command fails
set -e

# Database backup
>&2 echo "Backing up database"
internal_backup="/tmp/${BACKUP_FILENAME}"
docker exec --env-file "${PASSFILE}" "${database_container}" pg_dump "vaultwarden" -cwv -h "localhost" -U "vaultwarden" -f "${internal_backup}"
docker cp "${database_container}":"${internal_backup}" "${BACKUP_DEST}"

# Files backup
files=("attachments" "sends" "config.json" "rsa_key.pem" "rsa_key.pub.pem")
for file in "${files[@]}"; do
	>&2 echo "Copying ${file}"
	docker cp -a "${base_container}":"/data/${file}" "${BACKUP_DEST}"
done

# Backup cleanup
# Only keep the 30 most recent backups => probably a month worth of backups, seems about right.
pushd "${BACKUP_DEST}"
rm $( ls -l |
	grep sqlbkp |                            # Only cleanup database backups
	sed -E 's/.*\s([a-z0-9_-]+\.bak)$/\1/' | # Take file part
	head -n -30 )                            # Keep 30 backups
popd

>&2 echo "Done"