megaproxy
61a7884ee5
Full-stack self-hosted finance app with FastAPI backend and React frontend. Features: - Accounts, transactions, budgets, investments with GBP base currency - CSV import with auto-detection for 10 UK bank formats - ML predictions: spending forecast, net worth projection, Monte Carlo - 7 selectable themes (Obsidian, Arctic, Midnight, Vault, Terminal, Synthwave, Ledger) - Receipt/document attachments on transactions (JPEG, PNG, WebP, PDF) - AES-256-GCM field encryption, RS256 JWT, TOTP 2FA, RLS, audit log - Encrypted nightly backups + key rotation script - Mobile-responsive layout with bottom nav Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
45 lines
1.4 KiB
Bash
Executable file
45 lines
1.4 KiB
Bash
Executable file
#!/bin/bash
|
|
# backup.sh — pg_dump | gzip | gpg encrypt → /backups/
|
|
# Run inside the backend container:
|
|
# docker compose exec backend bash /app/scripts/backup.sh
|
|
# Or from host:
|
|
# docker compose exec -e BACKUP_PASSPHRASE="$BACKUP_PASSPHRASE" backend bash scripts/backup.sh
|
|
set -euo pipefail
|
|
|
|
TIMESTAMP=$(date +%Y%m%d_%H%M%S)
|
|
BACKUP_DIR="${BACKUP_DIR:-/app/backups}"
|
|
BACKUP_FILE="${BACKUP_DIR}/${TIMESTAMP}.sql.gz.gpg"
|
|
RETENTION_DAYS="${BACKUP_RETENTION_DAYS:-30}"
|
|
|
|
# Require passphrase
|
|
if [ -z "${BACKUP_PASSPHRASE:-}" ]; then
|
|
echo "[backup] ERROR: BACKUP_PASSPHRASE is not set" >&2
|
|
exit 1
|
|
fi
|
|
|
|
mkdir -p "${BACKUP_DIR}"
|
|
echo "[backup] Starting at ${TIMESTAMP}"
|
|
|
|
# pg_dump using the DATABASE_URL but swap asyncpg driver for psycopg2-compatible URL
|
|
PG_URL="${DATABASE_URL/postgresql+asyncpg/postgresql}"
|
|
|
|
pg_dump "${PG_URL}" \
|
|
| gzip \
|
|
| gpg --batch --yes --symmetric --cipher-algo AES256 \
|
|
--passphrase "${BACKUP_PASSPHRASE}" \
|
|
--output "${BACKUP_FILE}"
|
|
|
|
SIZE=$(du -sh "${BACKUP_FILE}" | cut -f1)
|
|
echo "[backup] Written ${SIZE} → ${BACKUP_FILE}"
|
|
|
|
# List current backups
|
|
COUNT=$(find "${BACKUP_DIR}" -name "*.sql.gz.gpg" | wc -l)
|
|
echo "[backup] ${COUNT} backup(s) on disk"
|
|
|
|
# Prune old backups
|
|
PRUNED=$(find "${BACKUP_DIR}" -name "*.sql.gz.gpg" -mtime "+${RETENTION_DAYS}" -print -delete | wc -l)
|
|
if [ "${PRUNED}" -gt 0 ]; then
|
|
echo "[backup] Pruned ${PRUNED} backup(s) older than ${RETENTION_DAYS} days"
|
|
fi
|
|
|
|
echo "[backup] Done"
|