CyberMind-FR
c6fb79ed3b
New packages: - secubox-app-backup: Unified backup for LXC containers, UCI config, services - luci-app-backup: KISS dashboard with container list and backup history - secubox-app-mailserver: Custom Postfix+Dovecot in LXC with mesh backup Enhanced dnsctl with: - generate: Auto-create subdomain A records - suggest: Name suggestions by category - mail-setup: MX, SPF, DMARC record creation - dkim-add: DKIM TXT record management Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
140 lines
3.8 KiB
Bash
140 lines
3.8 KiB
Bash
#!/bin/sh
|
|
# SecuBox Backup - Remote Storage Functions (Gitea/Mesh)
|
|
|
|
CONFIG="backup"
|
|
|
|
# Get Gitea config
|
|
gitea_get_config() {
|
|
local url=$(uci -q get $CONFIG.gitea.url)
|
|
local repo=$(uci -q get $CONFIG.gitea.repo)
|
|
local token=$(uci -q get $CONFIG.gitea.token)
|
|
local branch=$(uci -q get $CONFIG.gitea.branch)
|
|
|
|
[ -z "$url" ] || [ -z "$repo" ] && return 1
|
|
|
|
echo "$url|$repo|$token|${branch:-master}"
|
|
}
|
|
|
|
# Push backup to Gitea
|
|
gitea_push() {
|
|
local backup_file="$1"
|
|
local message="${2:-Automated backup}"
|
|
|
|
local config=$(gitea_get_config)
|
|
[ -z "$config" ] && { echo "Gitea not configured"; return 1; }
|
|
|
|
local url=$(echo "$config" | cut -d'|' -f1)
|
|
local repo=$(echo "$config" | cut -d'|' -f2)
|
|
local token=$(echo "$config" | cut -d'|' -f3)
|
|
local branch=$(echo "$config" | cut -d'|' -f4)
|
|
|
|
local filename=$(basename "$backup_file")
|
|
local content=$(base64 -w 0 < "$backup_file")
|
|
|
|
# Check if file exists (to update or create)
|
|
local sha=""
|
|
local existing=$(wget -q -O - --header="Authorization: token $token" \
|
|
"$url/api/v1/repos/$repo/contents/backups/$filename?ref=$branch" 2>/dev/null)
|
|
|
|
if [ -n "$existing" ]; then
|
|
sha=$(echo "$existing" | jsonfilter -e '@.sha' 2>/dev/null)
|
|
fi
|
|
|
|
# Create/update file
|
|
local payload
|
|
if [ -n "$sha" ]; then
|
|
payload="{\"message\":\"$message\",\"content\":\"$content\",\"sha\":\"$sha\",\"branch\":\"$branch\"}"
|
|
else
|
|
payload="{\"message\":\"$message\",\"content\":\"$content\",\"branch\":\"$branch\"}"
|
|
fi
|
|
|
|
local response=$(echo "$payload" | wget -q -O - --post-data=- \
|
|
--header="Authorization: token $token" \
|
|
--header="Content-Type: application/json" \
|
|
"$url/api/v1/repos/$repo/contents/backups/$filename" 2>/dev/null)
|
|
|
|
if echo "$response" | grep -q '"content"'; then
|
|
echo " Pushed to Gitea: $filename"
|
|
return 0
|
|
else
|
|
echo " Failed to push to Gitea"
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
# Pull backup from Gitea
|
|
gitea_pull() {
|
|
local filename="$1"
|
|
local dest="$2"
|
|
|
|
local config=$(gitea_get_config)
|
|
[ -z "$config" ] && { echo "Gitea not configured"; return 1; }
|
|
|
|
local url=$(echo "$config" | cut -d'|' -f1)
|
|
local repo=$(echo "$config" | cut -d'|' -f2)
|
|
local token=$(echo "$config" | cut -d'|' -f3)
|
|
local branch=$(echo "$config" | cut -d'|' -f4)
|
|
|
|
local response=$(wget -q -O - --header="Authorization: token $token" \
|
|
"$url/api/v1/repos/$repo/contents/backups/$filename?ref=$branch" 2>/dev/null)
|
|
|
|
if [ -z "$response" ]; then
|
|
echo " File not found on Gitea: $filename"
|
|
return 1
|
|
fi
|
|
|
|
local content=$(echo "$response" | jsonfilter -e '@.content' 2>/dev/null)
|
|
|
|
if [ -n "$content" ]; then
|
|
echo "$content" | base64 -d > "$dest/$filename"
|
|
echo " Downloaded from Gitea: $filename"
|
|
return 0
|
|
fi
|
|
|
|
return 1
|
|
}
|
|
|
|
# List remote backups
|
|
gitea_list() {
|
|
local config=$(gitea_get_config)
|
|
[ -z "$config" ] && { echo "Gitea not configured"; return 1; }
|
|
|
|
local url=$(echo "$config" | cut -d'|' -f1)
|
|
local repo=$(echo "$config" | cut -d'|' -f2)
|
|
local token=$(echo "$config" | cut -d'|' -f3)
|
|
local branch=$(echo "$config" | cut -d'|' -f4)
|
|
|
|
local response=$(wget -q -O - --header="Authorization: token $token" \
|
|
"$url/api/v1/repos/$repo/contents/backups?ref=$branch" 2>/dev/null)
|
|
|
|
if [ -z "$response" ]; then
|
|
echo " No remote backups found"
|
|
return 0
|
|
fi
|
|
|
|
echo "$response" | jsonfilter -e '@[*].name' 2>/dev/null | while read name; do
|
|
local size=$(echo "$response" | jsonfilter -e "@[@.name='$name'].size" 2>/dev/null)
|
|
printf "%-50s %s\n" "$name" "${size:-?} bytes"
|
|
done
|
|
}
|
|
|
|
# Sync with mesh peers (placeholder)
|
|
mesh_sync() {
|
|
local mode="${1:-push}"
|
|
|
|
if command -v secubox-p2p >/dev/null 2>&1; then
|
|
case "$mode" in
|
|
push)
|
|
echo " Pushing to mesh peers..."
|
|
secubox-p2p push-backup 2>/dev/null || echo " Mesh sync not implemented"
|
|
;;
|
|
pull)
|
|
echo " Pulling from mesh peers..."
|
|
secubox-p2p pull-backup 2>/dev/null || echo " Mesh sync not implemented"
|
|
;;
|
|
esac
|
|
else
|
|
echo " Mesh (secubox-p2p) not available"
|
|
fi
|
|
}
|