Initial commit: MyMidas personal finance tracker

Full-stack self-hosted finance app with FastAPI backend and React frontend.

Features:
- Accounts, transactions, budgets, investments with GBP base currency
- CSV import with auto-detection for 10 UK bank formats
- ML predictions: spending forecast, net worth projection, Monte Carlo
- 7 selectable themes (Obsidian, Arctic, Midnight, Vault, Terminal, Synthwave, Ledger)
- Receipt/document attachments on transactions (JPEG, PNG, WebP, PDF)
- AES-256-GCM field encryption, RS256 JWT, TOTP 2FA, RLS, audit log
- Encrypted nightly backups + key rotation script
- Mobile-responsive layout with bottom nav

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

scripts/restore.sh

@@ -0,0 +1,56 @@
+#!/bin/bash
+# restore.sh — decrypt and restore a backup
+# Usage:
+#   docker compose exec backend bash scripts/restore.sh <backup_file>
+#   docker compose exec backend bash scripts/restore.sh --list
+set -euo pipefail
+
+BACKUP_DIR="${BACKUP_DIR:-/app/backups}"
+
+if [ "${1:-}" = "--list" ]; then
+  echo "[restore] Available backups in ${BACKUP_DIR}:"
+  find "${BACKUP_DIR}" -name "*.sql.gz.gpg" -printf "  %f  (%s bytes)\n" | sort -r
+  exit 0
+fi
+
+if [ -z "${1:-}" ]; then
+  echo "Usage: restore.sh <backup_file.sql.gz.gpg>"
+  echo "       restore.sh --list"
+  exit 1
+fi
+
+BACKUP_FILE="$1"
+
+# Accept bare filename or full path
+if [ ! -f "${BACKUP_FILE}" ] && [ -f "${BACKUP_DIR}/${BACKUP_FILE}" ]; then
+  BACKUP_FILE="${BACKUP_DIR}/${BACKUP_FILE}"
+fi
+
+if [ ! -f "${BACKUP_FILE}" ]; then
+  echo "[restore] ERROR: File not found: ${BACKUP_FILE}" >&2
+  exit 1
+fi
+
+if [ -z "${BACKUP_PASSPHRASE:-}" ]; then
+  echo "[restore] ERROR: BACKUP_PASSPHRASE is not set" >&2
+  exit 1
+fi
+
+PG_URL="${DATABASE_URL/postgresql+asyncpg/postgresql}"
+
+echo "[restore] WARNING: This will overwrite the current database."
+echo "[restore] File: ${BACKUP_FILE}"
+read -r -p "[restore] Type 'yes' to continue: " CONFIRM
+if [ "${CONFIRM}" != "yes" ]; then
+  echo "[restore] Aborted"
+  exit 1
+fi
+
+echo "[restore] Decrypting and restoring…"
+gpg --batch --yes --decrypt \
+    --passphrase "${BACKUP_PASSPHRASE}" \
+    "${BACKUP_FILE}" \
+  | gunzip \
+  | psql "${PG_URL}"
+
+echo "[restore] Done"