initial commit

Signed-off-by: Robert Günzler <r@gnzler.io>

7 files changed, 101 insertions, 0 deletions

diff --git a/bundles/restic-backup/files/cron_job b/bundles/restic-backup/files/cron_job
new file mode 100644
index 0000000..6fcea06
--- /dev/null
+++ b/bundles/restic-backup/files/cron_job
@@ -0,0 +1,5 @@
+#!/bin/sh
+set -eu
+/usr/bin/resticbackup >/dev/null 2>&1
+tgnotify '✨*${node.name}/resticbackup*\nsuccess!' >/dev/null 2>&1
+exit 0
diff --git a/bundles/restic-backup/files/excludes b/bundles/restic-backup/files/excludes
new file mode 100644
index 0000000..8a02379
--- /dev/null
+++ b/bundles/restic-backup/files/excludes
@@ -0,0 +1,3 @@
+% for path in paths:
+${path}
+% endfor
diff --git a/bundles/restic-backup/files/includes b/bundles/restic-backup/files/includes
new file mode 100644
index 0000000..8a02379
--- /dev/null
+++ b/bundles/restic-backup/files/includes
@@ -0,0 +1,3 @@
+% for path in paths:
+${path}
+% endfor
diff --git a/bundles/restic-backup/files/restic.conf b/bundles/restic-backup/files/restic.conf
new file mode 100644
index 0000000..3807fd7
--- /dev/null
+++ b/bundles/restic-backup/files/restic.conf
@@ -0,0 +1,4 @@
+RESTIC_REPOSITORY=b2:${repo.vault.cmd(f"rbw get {node.name}/b2/backupbucket")}:/
+RESTIC_PASSWORD=${repo.vault.password_for(f"b2_bucket_{node.name}_pw")}
+B2_ACCOUNT_ID=${repo.vault.cmd(f"rbw get {node.name}/b2/keyid")}
+B2_ACCOUNT_KEY=${repo.vault.cmd(f"rbw get {node.name}/b2/appkey")}
diff --git a/bundles/restic-backup/files/resticbackup b/bundles/restic-backup/files/resticbackup
new file mode 100644
index 0000000..af61d7e
--- /dev/null
+++ b/bundles/restic-backup/files/resticbackup
@@ -0,0 +1,36 @@
+#!/bin/sh
+set -eu
+
+backup_includes=/etc/restic/includes
+backup_excludes=/etc/restic/excludes
+backup_tag=foobar
+backup_keep=1m
+
+main() {
+	# remove stale locks
+	resticw unlock
+
+	# run backup
+	resticw backup \
+		--one-file-system \
+		--files-from "${backup_includes}" \
+		--exclude-file "${backup_excludes}" \
+		--tag "${backup_tag}"
+
+	# prune backups older than $backup_keep duration
+	resticw forget \
+		--keep-within "${backup_keep}" \
+		--prune \
+		--group-by "paths,tags" \
+		--tag "${backup_tag}"
+
+	# TODO: restic check
+	# TODO: dump stats to file in metrics format to /run/prom/restic
+}
+
+exit_hook() {
+	resticw unlock
+}
+trap exit_hook INT EXIT
+
+main
diff --git a/bundles/restic-backup/files/resticrestore b/bundles/restic-backup/files/resticrestore
new file mode 100644
index 0000000..68a10f1
--- /dev/null
+++ b/bundles/restic-backup/files/resticrestore
@@ -0,0 +1,29 @@
+#!/bin/sh
+set -eu
+
+backup_tag=foobar
+backup_restore_snapshot=latest
+
+main() {
+	# remove stale locks
+	resticw unlock
+
+	# run restore
+	resticw restore \
+		--verify \
+		--tag "${backup_tag}" \
+		--include "${1:-*}" \
+		--target / \
+		"${backup_restore_snapshot}"
+
+	# TODO: restic check
+	# TODO: dump stats to file in metrics format to /run/prom/restic
+}
+
+exit_hook() {
+	resticw unlock
+}
+trap exit_hook INT EXIT
+
+[ "$1" = "-h" ] && printf 'usage: resticrestore [TARGET]\n\n' && exit 0
+main "$1"
diff --git a/bundles/restic-backup/files/resticw b/bundles/restic-backup/files/resticw
new file mode 100644
index 0000000..e3a3e87
--- /dev/null
+++ b/bundles/restic-backup/files/resticw
@@ -0,0 +1,21 @@
+#!/bin/sh
+set -eu
+
+# import environment from config
+# can overwrite above defaults
+set -a
+. /etc/restic/restic.conf
+set +a
+
+test -n "${RESTIC_REPOSITORY+1}"
+test -n "${RESTIC_PASSWORD+1}"
+
+case "${RESTIC_REPOSITORY}" in
+b2*)
+	test -n "${B2_ACCOUNT_ID+1}"
+	test -n "${B2_ACCOUNT_KEY+1}"
+	;;
+
+esac
+
+exec restic $@