mix
ae42450ec1
Full server backup (spec 7.5.A): internal/backup produces a tar.gz of all of /data — a consistent SQLite snapshot via VACUUM INTO, DKIM keys, sasldb2 and a version manifest; TLS certs (tls/) and the Postfix queue are excluded. Two equal paths: the panel button (POST /backup, no-store) and the selfpost-backup CLI via docker exec (spec 11.6). CheckRestore runs before store.Open: a manifest version mismatch refuses to boot with the image tag to use; a match consumes the manifest so it only guards the first post-restore boot. Restore is not a separate branch — Postfix/OpenDKIM regenerate from the restored SQLite as on any start. Domain export/import (spec 7.5.B): DomainExport carries the DKIM private key and each application's working password. SASL secrets are read from sasldb2 via db_dump (the userPassword property is plaintext) and, on import, re-keyed under the local realm with saslpasswd2 — so credentials keep working on an instance with a different hostname, with no DKIM DNS change. Import validates and rolls back atomically on any failure. db-util (db_dump) is now an explicit image dep. Verified on the server (selfpost:p9): gofmt/vet/test green; container e2e for cross-realm domain export/import (SMTP AUTH 235 under the new realm), CLI and panel backups, same-version restore, and version-mismatch refusal. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
74 lines
1.8 KiB
Go
74 lines
1.8 KiB
Go
// Command selfpost-backup produces the full persistent-state archive from inside
|
|
// the container, invoked via `docker exec` for scripted/cron backups — the CLI
|
|
// equivalent of the panel's backup button (spec 7.5.A, 11.6).
|
|
//
|
|
// By default the gzip-compressed tar is written to stdout, so the usual form is:
|
|
//
|
|
// docker exec <container> selfpost-backup > selfpost-backup.tar.gz
|
|
//
|
|
// Use -o to write to a file instead. The resulting archive contains DKIM private
|
|
// keys, the admin password hash and SASL credentials — treat it as a secret
|
|
// (spec 7.5.A).
|
|
package main
|
|
|
|
import (
|
|
"flag"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
|
|
"codeberg.org/mix/selfpost/internal/backup"
|
|
"codeberg.org/mix/selfpost/internal/buildinfo"
|
|
)
|
|
|
|
func main() {
|
|
showVersion := flag.Bool("version", false, "print version and exit")
|
|
out := flag.String("o", "", "write the archive to this file instead of stdout")
|
|
flag.Parse()
|
|
|
|
if *showVersion {
|
|
fmt.Println(buildinfo.Version)
|
|
return
|
|
}
|
|
|
|
if err := run(*out); err != nil {
|
|
fmt.Fprintf(os.Stderr, "selfpost-backup: %v\n", err)
|
|
os.Exit(1)
|
|
}
|
|
}
|
|
|
|
func run(outPath string) error {
|
|
dataDir := envDefault("SELFPOST_DATA_DIR", "/data")
|
|
dbPath := envDefault("SELFPOST_DB_PATH", filepath.Join(dataDir, "selfpost.db"))
|
|
|
|
w := os.Stdout
|
|
if outPath != "" {
|
|
// Backups are secret; create them owner-only.
|
|
f, err := os.OpenFile(outPath, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o600)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer f.Close()
|
|
w = f
|
|
}
|
|
|
|
if err := backup.Create(w, backup.Params{
|
|
DataDir: dataDir,
|
|
DBPath: dbPath,
|
|
Version: buildinfo.Version,
|
|
}); err != nil {
|
|
return err
|
|
}
|
|
if outPath != "" {
|
|
fmt.Fprintf(os.Stderr, "selfpost-backup: wrote %s (SelfPost %s)\n", outPath, buildinfo.Version)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func envDefault(key, def string) string {
|
|
if v := os.Getenv(key); v != "" {
|
|
return v
|
|
}
|
|
return def
|
|
}
|