From 5e9c23ff059c208a6050cc79fc1d465b0ee96171 Mon Sep 17 00:00:00 2001
From: Tibo De Peuter <tibo.depeuter@gmail.com>
Date: Thu, 15 Jun 2023 13:08:05 +0200
Subject: [PATCH] #1 Updated vaultwarden script to keep only 30 backups

---
 backups/create_vaultwarden_backup.sh | 18 +++++++++++++++---
 1 file changed, 15 insertions(+), 3 deletions(-)

diff --git a/backups/create_vaultwarden_backup.sh b/backups/create_vaultwarden_backup.sh
index b31857c..c55d262 100755
--- a/backups/create_vaultwarden_backup.sh
+++ b/backups/create_vaultwarden_backup.sh
@@ -2,7 +2,9 @@
 # Backup script for Vaultwarden in a kubernetes cluster
 
 BACKUP_DEST="/mnt/PRIVATE_DOCS/BACKUPS/vaultwarden"
-PASSFILE=./vaultwarden_pass.txt
+PASSFILE="./vaultwarden_pass.txt"
+
+BACKUP_FILENAME=vaultwarden-sqlbkp_`date +"%Y%m%d"`.bak
 
 # Retrieve container names
 base_container=$( docker ps --format "{{.Names}}" | grep vaultwarden_vaultwarden )
@@ -13,8 +15,9 @@ set -e
 
 # Database backup
 >&2 echo "Backing up database"
-docker exec --env-file "${PASSFILE}" "${database_container}" pg_dump "vaultwarden" -cwv -h "localhost" -U "vaultwarden" -f /tmp/vaultwarden-sqlbkp_`date +"%Y%m%d"`.bak
-docker cp "${database_container}":/tmp/vaultwarden-sqlbkp_$(date +"%Y%m%d").bak "${BACKUP_DEST}"
+internal_backup="/tmp/${BACKUP_FILENAME}"
+docker exec --env-file "${PASSFILE}" "${database_container}" pg_dump "vaultwarden" -cwv -h "localhost" -U "vaultwarden" -f "${internal_backup}"
+docker cp "${database_container}":"${internal_backup}" "${BACKUP_DEST}"
 
 # Files backup
 files=("attachments" "sends" "config.json" "rsa_key.pem" "rsa_key.pub.pem")
@@ -23,4 +26,13 @@ for file in "${files[@]}"; do
 	docker cp -a "${base_container}":"/data/${file}" "${BACKUP_DEST}"
 done
 
+# Backup cleanup
+# Only keep the 30 most recent backups => probably a month worth of backups, seems about right.
+pushd "${BACKUP_DEST}"
+rm $( ls -l |
+	grep sqlbkp |                            # Only cleanup database backups
+	sed -E 's/.*\s([a-z0-9_-]+\.bak)$/\1/' | # Take file part
+	head -n -30 )                            # Keep 30 backups
+popd
+
 >&2 echo "Done"