70 lines
2.0 KiB
Bash
Executable File
70 lines
2.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
||
set -euo pipefail
|
||
|
||
# ============================================
|
||
# Certd 备份脚本
|
||
# 备份 SQLite 数据库 + 配置文件
|
||
# ============================================
|
||
|
||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||
cd "$SCRIPT_DIR"
|
||
|
||
# 加载配置
|
||
if [ -f .env ]; then
|
||
sed -i 's/\r$//' .env
|
||
set -a; source .env; set +a
|
||
else
|
||
echo "[ERROR] .env 文件不存在,请先运行 deploy.sh" >&2
|
||
exit 1
|
||
fi
|
||
|
||
# ===== 配置 =====
|
||
DATA_DIR="${CERTD_DATA_DIR:-/data/certd}"
|
||
BACKUP_BASE="${BACKUP_DIR:-/var/backups/certd}"
|
||
TIMESTAMP=$(date +%Y%m%d_%H%M%S)
|
||
BACKUP_DIR_FULL="${BACKUP_BASE}/${TIMESTAMP}"
|
||
RETENTION_DAYS=30
|
||
|
||
echo "========== Certd 备份 =========="
|
||
echo "时间: $(date '+%Y-%m-%d %H:%M:%S')"
|
||
echo "数据目录: $DATA_DIR"
|
||
echo "备份目录: $BACKUP_DIR_FULL"
|
||
echo ""
|
||
|
||
mkdir -p "$BACKUP_DIR_FULL"
|
||
|
||
# ===== 备份数据目录(SQLite + 证书 + 配置)=====
|
||
echo "[1/3] 备份 Certd 数据..."
|
||
if [ -d "$DATA_DIR" ]; then
|
||
tar czf "$BACKUP_DIR_FULL/certd-data.tar.gz" -C "$(dirname "$DATA_DIR")" "$(basename "$DATA_DIR")"
|
||
echo " ✓ 数据目录已备份"
|
||
else
|
||
echo " ⚠ 数据目录不存在: $DATA_DIR"
|
||
fi
|
||
|
||
# ===== 备份 docker-compose 和配置 =====
|
||
echo "[2/3] 备份部署配置..."
|
||
tar czf "$BACKUP_DIR_FULL/certd-config.tar.gz" \
|
||
-C "$SCRIPT_DIR" \
|
||
docker-compose.yml .env nginx/ 2>/dev/null || true
|
||
echo " ✓ 配置已备份"
|
||
|
||
# ===== 清理旧备份 =====
|
||
echo "[3/3] 清理 ${RETENTION_DAYS} 天前的旧备份..."
|
||
find "$BACKUP_BASE" -maxdepth 1 -type d -mtime +${RETENTION_DAYS} -exec rm -rf {} \; 2>/dev/null || true
|
||
echo " ✓ 旧备份已清理"
|
||
|
||
# ===== 汇总 =====
|
||
echo ""
|
||
echo "========== 备份完成 =========="
|
||
TOTAL_SIZE=$(du -sh "$BACKUP_DIR_FULL" | cut -f1)
|
||
echo "备份位置: $BACKUP_DIR_FULL"
|
||
echo "备份大小: $TOTAL_SIZE"
|
||
echo ""
|
||
echo "备份内容:"
|
||
ls -lh "$BACKUP_DIR_FULL/"
|
||
echo ""
|
||
echo "恢复方法:"
|
||
echo " tar xzf $BACKUP_DIR_FULL/certd-data.tar.gz -C $(dirname "$DATA_DIR")"
|
||
echo " cd $SCRIPT_DIR && docker compose restart"
|