megaproxy
61a7884ee5
Full-stack self-hosted finance app with FastAPI backend and React frontend. Features: - Accounts, transactions, budgets, investments with GBP base currency - CSV import with auto-detection for 10 UK bank formats - ML predictions: spending forecast, net worth projection, Monte Carlo - 7 selectable themes (Obsidian, Arctic, Midnight, Vault, Terminal, Synthwave, Ledger) - Receipt/document attachments on transactions (JPEG, PNG, WebP, PDF) - AES-256-GCM field encryption, RS256 JWT, TOTP 2FA, RLS, audit log - Encrypted nightly backups + key rotation script - Mobile-responsive layout with bottom nav Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
56 lines
1.4 KiB
Bash
Executable file
56 lines
1.4 KiB
Bash
Executable file
#!/bin/bash
|
|
# restore.sh — decrypt and restore a backup
|
|
# Usage:
|
|
# docker compose exec backend bash scripts/restore.sh <backup_file>
|
|
# docker compose exec backend bash scripts/restore.sh --list
|
|
set -euo pipefail
|
|
|
|
BACKUP_DIR="${BACKUP_DIR:-/app/backups}"
|
|
|
|
if [ "${1:-}" = "--list" ]; then
|
|
echo "[restore] Available backups in ${BACKUP_DIR}:"
|
|
find "${BACKUP_DIR}" -name "*.sql.gz.gpg" -printf " %f (%s bytes)\n" | sort -r
|
|
exit 0
|
|
fi
|
|
|
|
if [ -z "${1:-}" ]; then
|
|
echo "Usage: restore.sh <backup_file.sql.gz.gpg>"
|
|
echo " restore.sh --list"
|
|
exit 1
|
|
fi
|
|
|
|
BACKUP_FILE="$1"
|
|
|
|
# Accept bare filename or full path
|
|
if [ ! -f "${BACKUP_FILE}" ] && [ -f "${BACKUP_DIR}/${BACKUP_FILE}" ]; then
|
|
BACKUP_FILE="${BACKUP_DIR}/${BACKUP_FILE}"
|
|
fi
|
|
|
|
if [ ! -f "${BACKUP_FILE}" ]; then
|
|
echo "[restore] ERROR: File not found: ${BACKUP_FILE}" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z "${BACKUP_PASSPHRASE:-}" ]; then
|
|
echo "[restore] ERROR: BACKUP_PASSPHRASE is not set" >&2
|
|
exit 1
|
|
fi
|
|
|
|
PG_URL="${DATABASE_URL/postgresql+asyncpg/postgresql}"
|
|
|
|
echo "[restore] WARNING: This will overwrite the current database."
|
|
echo "[restore] File: ${BACKUP_FILE}"
|
|
read -r -p "[restore] Type 'yes' to continue: " CONFIRM
|
|
if [ "${CONFIRM}" != "yes" ]; then
|
|
echo "[restore] Aborted"
|
|
exit 1
|
|
fi
|
|
|
|
echo "[restore] Decrypting and restoring…"
|
|
gpg --batch --yes --decrypt \
|
|
--passphrase "${BACKUP_PASSPHRASE}" \
|
|
"${BACKUP_FILE}" \
|
|
| gunzip \
|
|
| psql "${PG_URL}"
|
|
|
|
echo "[restore] Done"
|