CyberMind-FR
c6fb79ed3b
New packages: - secubox-app-backup: Unified backup for LXC containers, UCI config, services - luci-app-backup: KISS dashboard with container list and backup history - secubox-app-mailserver: Custom Postfix+Dovecot in LXC with mesh backup Enhanced dnsctl with: - generate: Auto-create subdomain A records - suggest: Name suggestions by category - mail-setup: MX, SPF, DMARC record creation - dkim-add: DKIM TXT record management Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
131 lines
3.1 KiB
Markdown
131 lines
3.1 KiB
Markdown
# SecuBox Backup Manager
|
|
|
|
Unified backup system for LXC containers, UCI configuration, service data, and profiles with mesh sync support.
|
|
|
|
## Installation
|
|
|
|
```bash
|
|
opkg install secubox-app-backup
|
|
```
|
|
|
|
## CLI Usage
|
|
|
|
### Create Backups
|
|
|
|
```bash
|
|
# Full backup (config + containers + services)
|
|
secubox-backup create --full
|
|
|
|
# Config only (UCI, certificates)
|
|
secubox-backup create --config
|
|
|
|
# Containers only (LXC)
|
|
secubox-backup create --containers
|
|
|
|
# Services only (HAProxy, mitmproxy data)
|
|
secubox-backup create --services
|
|
```
|
|
|
|
### List Backups
|
|
|
|
```bash
|
|
secubox-backup list # All backups
|
|
secubox-backup list --local # Local only
|
|
secubox-backup list --remote # Gitea remote only
|
|
```
|
|
|
|
### Restore
|
|
|
|
```bash
|
|
secubox-backup restore config-20260205-120000.tar.gz
|
|
secubox-backup restore config-20260205-120000.tar.gz --dry-run
|
|
```
|
|
|
|
### Container Management
|
|
|
|
```bash
|
|
secubox-backup container list # List LXC containers
|
|
secubox-backup container backup mitmproxy # Backup specific container
|
|
secubox-backup container restore mitmproxy /path/to/backup.tar.gz
|
|
secubox-backup container backups mitmproxy # List backups for container
|
|
```
|
|
|
|
### Profile Management
|
|
|
|
```bash
|
|
secubox-backup profile list # List profiles
|
|
secubox-backup profile create mysetup # Create from current config
|
|
secubox-backup profile apply mysetup # Apply profile
|
|
```
|
|
|
|
### Remote Sync (Gitea)
|
|
|
|
```bash
|
|
secubox-backup sync --push # Push to Gitea
|
|
secubox-backup sync --pull # List remote backups
|
|
```
|
|
|
|
### Maintenance
|
|
|
|
```bash
|
|
secubox-backup status # Show backup status
|
|
secubox-backup cleanup # Remove old backups (keeps last 10)
|
|
```
|
|
|
|
## UCI Configuration
|
|
|
|
```
|
|
config backup 'main'
|
|
option enabled '1'
|
|
option storage_path '/srv/backups'
|
|
option retention_days '30'
|
|
option max_backups '10'
|
|
option compress '1'
|
|
|
|
config schedule 'daily'
|
|
option enabled '1'
|
|
option type 'config'
|
|
option cron '0 3 * * *'
|
|
|
|
config schedule 'weekly'
|
|
option enabled '1'
|
|
option type 'full'
|
|
option cron '0 4 * * 0'
|
|
|
|
config remote 'gitea'
|
|
option enabled '1'
|
|
option url 'https://git.example.com'
|
|
option repo 'user/backups'
|
|
option token 'your-token'
|
|
option branch 'master'
|
|
```
|
|
|
|
## Backup Structure
|
|
|
|
```
|
|
/srv/backups/
|
|
├── config/ # UCI and certificate backups
|
|
│ └── config-YYYYMMDD-HHMMSS.tar.gz
|
|
├── containers/ # LXC container backups
|
|
│ ├── mitmproxy-YYYYMMDD-HHMMSS.tar.gz
|
|
│ └── haproxy-YYYYMMDD-HHMMSS.tar.gz
|
|
├── services/ # Service data backups
|
|
│ └── haproxy-YYYYMMDD-HHMMSS.tar.gz
|
|
└── profiles/ # Configuration profiles
|
|
└── mysetup.json
|
|
```
|
|
|
|
## What's Backed Up
|
|
|
|
| Type | Contents |
|
|
|------|----------|
|
|
| **Config** | `/etc/config/*`, `/etc/secubox/*`, `/etc/haproxy/*`, `/srv/haproxy/certs/*`, `/etc/acme/*` |
|
|
| **Containers** | Full LXC rootfs from `/srv/lxc/<name>/` |
|
|
| **Services** | `/srv/haproxy/`, `/srv/mitmproxy/`, `/srv/localai/`, `/srv/gitea/` |
|
|
|
|
## Dependencies
|
|
|
|
- `lxc` - For container backup/restore
|
|
- `tar` - Archive creation
|
|
- `wget` - Gitea API communication (optional)
|