65 lines
3.1 KiB
Bash
Executable File
65 lines
3.1 KiB
Bash
Executable File
#!/bin/bash
|
|
# Supersam full DB backup (pg_dump) to S3 (Beget Cloud Storage)
|
|
# Dumps the complete supabase postgres database and uploads to S3.
|
|
# Retention: keeps last 30 days.
|
|
#
|
|
# Cron: 0 */12 * * * /opt/supersam/scripts/backup-pgdump-s3.sh >> /var/log/supersam-backup-pgdump.log 2>&1
|
|
|
|
set -euo pipefail
|
|
|
|
# ── Config ────────────────────────────────────────────────────────────────
|
|
AWS_ACCESS_KEY_ID="YG4MQNKAPNL65200MBUY"
|
|
AWS_SECRET_ACCESS_KEY="8mXkFM2VRQ3pN1Nx4mhmJ2jrZoB5YTPUa4CaZh43"
|
|
S3_ENDPOINT="https://s3.ru1.storage.beget.cloud"
|
|
S3_BUCKET="02f162ff4a18-supersam-s3"
|
|
S3_PREFIX="backups"
|
|
|
|
DB_CONTAINER="supabase-db"
|
|
DB_USER="supabase_admin"
|
|
DB_NAME="postgres"
|
|
DB_PASS="4fe80bb21c7c3d17a8d8b226adf7a479"
|
|
|
|
RETENTION_DAYS=30
|
|
|
|
# ── Runtime ───────────────────────────────────────────────────────────────
|
|
TIMESTAMP=$(date +%Y-%m-%d_%H%M)
|
|
DUMP_FILE="/tmp/supersam-dump-${TIMESTAMP}.sql.gz"
|
|
S3_PATH="s3://${S3_BUCKET}/${S3_PREFIX}/pgdump/supersam-db-${TIMESTAMP}.sql.gz"
|
|
|
|
export AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY
|
|
|
|
echo "[$(date)] Starting pg_dump backup..."
|
|
|
|
# ── Dump ──────────────────────────────────────────────────────────────────
|
|
echo "[$(date)] Dumping database..."
|
|
docker exec -e PGPASSWORD="${DB_PASS}" "${DB_CONTAINER}" \
|
|
pg_dump -U "${DB_USER}" -d "${DB_NAME}" --no-owner --no-acl --clean --if-exists \
|
|
| gzip -9 > "${DUMP_FILE}"
|
|
|
|
DUMP_SIZE=$(du -h "${DUMP_FILE}" | cut -f1)
|
|
echo "[$(date)] Dump created: ${DUMP_FILE} (${DUMP_SIZE})"
|
|
|
|
# ── Upload via mc ─────────────────────────────────────────────────────────
|
|
echo "[$(date)] Uploading to S3..."
|
|
mc cp "${DUMP_FILE}" "beget/${S3_BUCKET}/${S3_PREFIX}/pgdump/supersam-db-${TIMESTAMP}.sql.gz" --quiet 2>&1
|
|
|
|
echo "[$(date)] Uploaded to ${S3_PATH}"
|
|
|
|
# ── Cleanup local ─────────────────────────────────────────────────────────
|
|
rm -f "${DUMP_FILE}"
|
|
echo "[$(date)] Local cleanup done"
|
|
|
|
# ── Retention: delete S3 pgdump backups older than RETENTION_DAYS ─────────
|
|
echo "[$(date)] Cleaning S3 pgdump backups older than ${RETENTION_DAYS} days..."
|
|
CUTOFF=$(date -d "-${RETENTION_DAYS} days" +%Y-%m-%d)
|
|
mc ls "beget/${S3_BUCKET}/${S3_PREFIX}/pgdump/" 2>/dev/null \
|
|
| awk '{print $NF}' \
|
|
| while read -r fname; do
|
|
file_date=$(echo "$fname" | grep -oP '\d{4}-\d{2}-\d{2}' || echo "")
|
|
if [ -n "$file_date" ] && [ "$file_date" \< "$CUTOFF" ]; then
|
|
mc rm "beget/${S3_BUCKET}/${S3_PREFIX}/pgdump/${fname}" --quiet 2>/dev/null
|
|
echo "[$(date)] Deleted old backup: ${fname}"
|
|
fi
|
|
done
|
|
|
|
echo "[$(date)] Backup complete." |