feat: add backup and restore scripts

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backup/backup_primary.sh

@@ -0,0 +1,97 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# =============================================================================
+# backup/backup_primary.sh — Create a full Gitea backup (dump) and store on Fedora
+# Depends on: Phase 1 complete (Gitea running on Unraid)
+#
+# What's in the dump:
+#   - SQLite database (users, tokens, SSH keys, OAuth, webhooks, org/team, issues)
+#   - All git repositories
+#   - app.ini config
+#
+# Steps:
+#   1. Run `gitea dump` inside the container to create a zip archive
+#   2. SCP the dump from Unraid to Fedora (offsite storage)
+#   3. Clean up the dump from Unraid /tmp
+#   4. Prune old backups beyond retention count
+#   5. Print backup summary
+# =============================================================================
+
+SCRIPT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
+source "${SCRIPT_DIR}/lib/common.sh"
+
+load_env
+require_vars UNRAID_IP UNRAID_SSH_USER UNRAID_GITEA_DATA_PATH \
+             FEDORA_IP FEDORA_SSH_USER \
+             BACKUP_STORAGE_PATH BACKUP_RETENTION_COUNT
+
+log_info "=== Gitea Primary Backup ==="
+
+# ---------------------------------------------------------------------------
+# Step 1: Run gitea dump inside the container
+# The -u git flag is important — gitea dump must run as the git user who
+# owns the repository files. The dump is created in /tmp inside the container
+# which maps to /tmp on the host via the default Docker tmpfs mount.
+# ---------------------------------------------------------------------------
+TIMESTAMP=$(date +%Y%m%d-%H%M%S)
+DUMP_FILENAME="gitea-dump-${TIMESTAMP}.zip"
+DUMP_REMOTE_PATH="/tmp/${DUMP_FILENAME}"
+
+log_info "Creating Gitea dump on Unraid..."
+ssh_exec UNRAID "docker exec -u git gitea gitea dump \
+  -c /data/gitea/conf/app.ini \
+  -f '${DUMP_REMOTE_PATH}'"
+log_success "Dump created: ${DUMP_FILENAME}"
+
+# ---------------------------------------------------------------------------
+# Step 2: Create backup storage directory on Fedora and transfer dump
+# The dump goes from Unraid → local machine → Fedora because direct
+# Unraid→Fedora SCP may not have SSH keys set up. Using the MacBook as
+# a relay is more reliable with our existing SSH config.
+# ---------------------------------------------------------------------------
+log_info "Transferring dump to Fedora backup storage..."
+ssh_exec FEDORA "mkdir -p '${BACKUP_STORAGE_PATH}'"
+
+# SCP from Unraid to local temp, then to Fedora
+LOCAL_TMP=$(mktemp -d)
+scp_to_local() {
+  local ip_var="UNRAID_IP" user_var="UNRAID_SSH_USER" port_var="UNRAID_SSH_PORT"
+  local ip="${!ip_var:-}" user="${!user_var:-}" port="${!port_var:-22}"
+  scp -o ConnectTimeout=10 -o BatchMode=yes -P "$port" \
+    "${user}@${ip}:${DUMP_REMOTE_PATH}" "${LOCAL_TMP}/${DUMP_FILENAME}"
+}
+scp_to_local
+scp_to FEDORA "${LOCAL_TMP}/${DUMP_FILENAME}" "${BACKUP_STORAGE_PATH}/${DUMP_FILENAME}"
+rm -rf "$LOCAL_TMP"
+log_success "Dump transferred to Fedora: ${BACKUP_STORAGE_PATH}/${DUMP_FILENAME}"
+
+# ---------------------------------------------------------------------------
+# Step 3: Clean up dump from Unraid /tmp
+# No reason to keep the dump on Unraid — it's on Fedora now.
+# ---------------------------------------------------------------------------
+ssh_exec UNRAID "rm -f '${DUMP_REMOTE_PATH}'"
+log_info "Cleaned up dump from Unraid"
+
+# ---------------------------------------------------------------------------
+# Step 4: Prune old backups beyond retention count
+# Lists all gitea-dump-*.zip files sorted by time (newest first), then
+# removes everything beyond BACKUP_RETENTION_COUNT.
+# ---------------------------------------------------------------------------
+log_info "Pruning old backups (keeping ${BACKUP_RETENTION_COUNT})..."
+ssh_exec FEDORA "cd '${BACKUP_STORAGE_PATH}' && ls -t gitea-dump-*.zip 2>/dev/null | tail -n +\$((${BACKUP_RETENTION_COUNT}+1)) | xargs -r rm -f"
+
+REMAINING=$(ssh_exec FEDORA "ls -1 '${BACKUP_STORAGE_PATH}'/gitea-dump-*.zip 2>/dev/null | wc -l" | xargs)
+log_info "Backups remaining: ${REMAINING}"
+
+# ---------------------------------------------------------------------------
+# Step 5: Summary
+# ---------------------------------------------------------------------------
+DUMP_SIZE=$(ssh_exec FEDORA "du -h '${BACKUP_STORAGE_PATH}/${DUMP_FILENAME}'" | awk '{print $1}')
+
+printf '\n'
+log_success "Backup complete"
+log_info "  File: ${DUMP_FILENAME}"
+log_info "  Size: ${DUMP_SIZE}"
+log_info "  Path: ${BACKUP_STORAGE_PATH}/${DUMP_FILENAME} (on Fedora)"
+log_info "  Total backups: ${REMAINING}"