125 lines
No EOL
4 KiB
Bash
125 lines
No EOL
4 KiB
Bash
function init-command() {
|
|
restic -r ${RESTIC_REPOSITORY}/pg-role -v init $@
|
|
}
|
|
|
|
function init-role-repo() {
|
|
|
|
if [ -z ${CERTIFICATE_FILE} ];
|
|
then
|
|
init-command
|
|
else
|
|
init-command --cacert ${CERTIFICATE_FILE}
|
|
fi
|
|
|
|
}
|
|
|
|
function init-database-command() {
|
|
restic -r ${RESTIC_REPOSITORY}/pg-database -v init $@
|
|
}
|
|
|
|
function init-database-repo() {
|
|
|
|
if [ -z ${CERTIFICATE_FILE} ];
|
|
then
|
|
init-database-command
|
|
else
|
|
init-database-command --cacert ${CERTIFICATE_FILE}
|
|
fi
|
|
}
|
|
|
|
function drop-create-db() {
|
|
psql -d template1 -h ${POSTGRES_SERVICE} -p ${POSTGRES_PORT} -U ${POSTGRES_USER} \
|
|
--no-password -c "DROP DATABASE \"${POSTGRES_DB}\";"
|
|
psql -d template1 -h ${POSTGRES_SERVICE} -p ${POSTGRES_PORT} -U ${POSTGRES_USER} \
|
|
--no-password -c "CREATE DATABASE \"${POSTGRES_DB}\";"
|
|
}
|
|
|
|
function create-pg-pass() {
|
|
local pg_host=${POSTGRES_HOST:-localhost}
|
|
|
|
echo "${pg_host}:${POSTGRES_DB}:${POSTGRES_USER}:${POSTGRES_PASSWORD}" > /root/.pgpass
|
|
echo "${POSTGRES_HOST}:template1:${POSTGRES_USER}:${POSTGRES_PASSWORD}" >> /root/.pgpass
|
|
chmod 0600 /root/.pgpass
|
|
}
|
|
|
|
function roles-unlock-command() {
|
|
restic -v -r ${RESTIC_REPOSITORY}/pg-role unlock --cleanup-cache $@
|
|
}
|
|
|
|
function roles-forget-command() {
|
|
restic -v -r ${RESTIC_REPOSITORY}/pg-role forget --keep-last 1 --keep-within ${RESTIC_DAYS_TO_KEEP}d --prune $@
|
|
}
|
|
|
|
function backup-roles() {
|
|
local role_prefix="$1"; shift
|
|
|
|
if [ -z ${CERTIFICATE_FILE} ];
|
|
then
|
|
roles-unlock-command
|
|
pg_dumpall -h ${POSTGRES_SERVICE} -p ${POSTGRES_PORT} -U${POSTGRES_USER} --no-password --roles-only | \
|
|
grep ${role_prefix} | restic -r ${RESTIC_REPOSITORY}/pg-role backup --stdin
|
|
roles-forget-command
|
|
else
|
|
roles-unlock-command --cacert ${CERTIFICATE_FILE}
|
|
pg_dumpall -h ${POSTGRES_SERVICE} -p ${POSTGRES_PORT} -U${POSTGRES_USER} --no-password --roles-only | \
|
|
grep ${role_prefix} | restic -r ${RESTIC_REPOSITORY}/pg-role backup --stdin --cacert ${CERTIFICATE_FILE}
|
|
roles-forget-command --cacert ${CERTIFICATE_FILE}
|
|
fi
|
|
}
|
|
|
|
function db-unlock-command() {
|
|
restic -v -r ${RESTIC_REPOSITORY}/pg-database unlock --cleanup-cache $@
|
|
}
|
|
|
|
function db-forget-command() {
|
|
restic -v -r ${RESTIC_REPOSITORY}/pg-database forget --keep-last 1 --keep-within ${RESTIC_DAYS_TO_KEEP}d --prune $@
|
|
}
|
|
|
|
function backup-db-dump() {
|
|
|
|
if [ -z ${CERTIFICATE_FILE} ];
|
|
then
|
|
db-unlock-command
|
|
pg_dump -d ${POSTGRES_DB} -h ${POSTGRES_SERVICE} -p ${POSTGRES_PORT} \
|
|
-U ${POSTGRES_USER} --no-password --serializable-deferrable | \
|
|
restic -r ${RESTIC_REPOSITORY}/pg-database backup --stdin
|
|
db-forget-command
|
|
else
|
|
db-unlock-command --cacert ${CERTIFICATE_FILE}
|
|
pg_dump -d ${POSTGRES_DB} -h ${POSTGRES_SERVICE} -p ${POSTGRES_PORT} \
|
|
-U ${POSTGRES_USER} --no-password --serializable-deferrable | \
|
|
restic -r ${RESTIC_REPOSITORY}/pg-database backup --stdin --cacert ${CERTIFICATE_FILE}
|
|
db-forget-command --cacert ${CERTIFICATE_FILE}
|
|
fi
|
|
}
|
|
|
|
function restore-roles() {
|
|
|
|
if [ -z ${CERTIFICATE_FILE} ];
|
|
then
|
|
roles-unlock-command
|
|
restic -r ${RESTIC_REPOSITORY}/pg-role dump latest stdin | \
|
|
psql -d template1 -h ${POSTGRES_SERVICE} -p ${POSTGRES_PORT} -U ${POSTGRES_USER} \
|
|
--no-password
|
|
else
|
|
roles-unlock-command --cacert ${CERTIFICATE_FILE}
|
|
restic -r ${RESTIC_REPOSITORY}/pg-role dump latest stdin --cacert ${CERTIFICATE_FILE} | \
|
|
psql -d template1 -h ${POSTGRES_SERVICE} -p ${POSTGRES_PORT} -U ${POSTGRES_USER} \
|
|
--no-password
|
|
fi
|
|
}
|
|
|
|
function restore-db() {
|
|
if [ -z ${CERTIFICATE_FILE} ];
|
|
then
|
|
db-unlock-command
|
|
restic -r ${RESTIC_REPOSITORY}/pg_database dump latest stdin | \
|
|
psql -d ${POSTGRES_DB} -h ${POSTGRES_SERVICE} -p ${POSTGRES_PORT} -U ${POSTGRES_USER} \
|
|
--no-password
|
|
else
|
|
db-unlock-command --cacert ${CERTIFICATE_FILE}
|
|
restic -r ${RESTIC_REPOSITORY}/pg_database dump latest stdin --cacert ${CERTIFICATE_FILE} | \
|
|
psql -d ${POSTGRES_DB} -h ${POSTGRES_SERVICE} -p ${POSTGRES_PORT} -U ${POSTGRES_USER} \
|
|
--no-password
|
|
fi
|
|
} |
