oliver
81 lines
3.1 KiB
Bash
Executable File
81 lines
3.1 KiB
Bash
Executable File
#!/bin/bash
|
|
# Backup Odoo 19 database script
|
|
# Description: Dumps Odoo DB, manages backup rotation, and maintains a current.zip symlink
|
|
|
|
set -euo pipefail # Fail on error, undefined variables, and pipe errors
|
|
|
|
log() { echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*"; }
|
|
|
|
# Load helper functions
|
|
source /4server/sbin/helpers
|
|
|
|
# Get contract info (also exports ODOO_DB_PASSWORD via helpers)
|
|
get_contract_info
|
|
|
|
log "UUID: $UUID"
|
|
log "Backup slots: $BACKUP_SLOTS"
|
|
log "DB host: $POSTGRES_HOST"
|
|
|
|
# Build paths
|
|
FILENAME="$(date +"%Y%m%d_%H%M").zip"
|
|
BACKUP_DIR="/BACKUP/$UUID"
|
|
BB_DIR="$BACKUP_DIR/bb"
|
|
|
|
# Ensure backup directories exist (requires elevated permissions like other ops)
|
|
doas mkdir -p "$BACKUP_DIR"
|
|
doas mkdir -p "$BB_DIR"
|
|
|
|
# Perform database dump inside the container
|
|
log "Starting dump -> $BACKUP_DIR/$FILENAME"
|
|
doas docker exec "$UUID" odoo db \
|
|
--db_host "$POSTGRES_HOST" \
|
|
-r "$UUID" \
|
|
-w "$ODOO_DB_PASSWORD" \
|
|
--data-dir /home/odoo/.local/share/Odoo/ \
|
|
dump "$UUID" "/mnt/backup/$FILENAME"
|
|
|
|
log "Dump complete: $(doas du -sh "$BACKUP_DIR/$FILENAME" | cut -f1)"
|
|
|
|
# Secure timestamped backups (scoped glob — leaves current.zip symlink untouched)
|
|
doas chmod 600 "$BACKUP_DIR"/[0-9]*.zip
|
|
|
|
# Hand ownership back to odoo inside the container
|
|
doas docker exec "$UUID" chown odoo:odoo -R /mnt/backup
|
|
|
|
# Update the current.zip symlink inside bb/ pointing at the backup just created.
|
|
# Target is relative (../$FILENAME) because the symlink lives one level deeper
|
|
# than the actual .zip files, so it stays valid if the directory is moved.
|
|
doas ln -sf "../$FILENAME" "$BB_DIR/current.zip"
|
|
log "bb/current.zip -> ../$FILENAME"
|
|
|
|
# Remove old backups beyond the configured slot count
|
|
# Process substitution (< <(...)) keeps the loop in the main shell so
|
|
# set -e / exit codes propagate correctly — unlike a pipe subshell.
|
|
while IFS= read -r old_file; do
|
|
log "Deleting old backup: $old_file"
|
|
doas rm -f "$old_file"
|
|
done < <(ls -t "$BACKUP_DIR"/[0-9]*.zip 2>/dev/null | tail -n +$((BACKUP_SLOTS + 1)))
|
|
|
|
log "Backup finished successfully."
|
|
|
|
# --- Custom modules snapshot ---
|
|
# Archive /4server/data/$UUID/git-server/repos/local/custom/ into .current.tar.gz.
|
|
# Rebuilt only when at least one file inside is newer than the existing archive,
|
|
# so borg backup dedup sees an identical blob on unchanged runs.
|
|
CUSTOM_SRC="/4server/data/$UUID/git-server/repos/local/custom"
|
|
CUSTOM_ARCHIVE="$BB_DIR/current_modules.tar.gz"
|
|
|
|
if [ ! -d "$CUSTOM_SRC" ]; then
|
|
log "Custom modules directory not found, skipping: $CUSTOM_SRC"
|
|
elif [ ! -f "$CUSTOM_ARCHIVE" ] || \
|
|
doas find "$CUSTOM_SRC" -newer "$CUSTOM_ARCHIVE" -print -quit | grep -q .; then
|
|
log "Changes detected in custom modules — rebuilding current.tar.gz"
|
|
# Write to a temp file first; mv is atomic, so borg never sees a partial archive
|
|
doas tar -czf "${CUSTOM_ARCHIVE}.tmp" \
|
|
-C "/4server/data/$UUID/git-server/repos/local" custom
|
|
doas mv "${CUSTOM_ARCHIVE}.tmp" "$CUSTOM_ARCHIVE"
|
|
log ".current.tar.gz updated: $(doas du -sh "$CUSTOM_ARCHIVE" | cut -f1)"
|
|
else
|
|
log "No changes in custom modules — current.tar.gz is up to date"
|
|
fi
|