X-Git-Url: https://piware.de/gitweb/?a=blobdiff_plain;f=backup;h=421fde9033ce1917c4e6aa8fc3433bb9e1f7aa1f;hb=7e78611ed422f11239be6537980f7aa551629fcd;hp=97046da9b460df5d51f9793415627fa31c0f6fe6;hpb=3afaf24d18e8d2b1c45974d5c6126b88ea2026dd;p=bin.git

diff --git a/backup b/backup
index 97046da..421fde9 100755
--- a/backup
+++ b/backup
@@ -2,6 +2,13 @@
 set -eu
 cd $HOME
 LOG=.cache/duplicity/log
+PATH=$PATH:/sbin:/usr/sbin
+RESTIC="restic --password-file $HOME/.config/backup-passphrase --repo sftp:piware.de:backup/restic"
+
+fail() {
+    notify-send -i network-error-symbolic -u critical -t 180 "${1:-BACKUP FAILED!}"
+    exit 1
+}
 
 # do backup every day
 if [ -e "$LOG" ] && [ $(( `date +%s` - `stat -c %Y $LOG` )) -lt 86300 ]; then
@@ -11,7 +18,7 @@ fi
 # figure out $DISPLAY when running from cron
 export DISPLAY="${DISPLAY:-:0}"
 
-if ! ip route | grep -q '^default.*wl'; then
+if ! ip route show default | grep -Eq 'dev (enp|wl)'; then
     notify-send "Backup skipped, not on WLAN"
     exit 0
 fi
@@ -26,5 +33,16 @@ fi
 
 notify-send "Backup started"
 mkdir -p $(dirname $LOG)
-env PASSPHRASE="$(cat ~/.backup-passphrase)" duplicity --full-if-older-than 1M --exclude-filelist .duplicity-ignore . rsync://piware.de/backup/donald >> $LOG || { notify-send "BACKUP FAILED!"; exit 1; }
+env PASSPHRASE="$(cat ~/.config/backup-passphrase)" duplicity --allow-source-mismatch --full-if-older-than 1M --exclude-filelist ~/.config/backup-ignore . rsync://piware.de/backup/laptop >> $LOG || fail
+duplicity remove-all-but-n-full 6 --force rsync://piware.de/backup/laptop
+
+$RESTIC backup --exclude-file=$HOME/.config/backup-ignore $HOME || fail
+# TODO: forget --prune policy: https://restic.readthedocs.io/en/stable/060_forget.html
 notify-send "Backup finished successfully"
+
+scp .config/backup-passphrase piware.de:.cache/
+ssh piware.de chmod u+w .cache/backup-passphrase
+trap "ssh piware.de shred -u .cache/backup-passphrase" EXIT INT QUIT PIPE
+ssh piware.de restic --password-file .cache/backup-passphrase --repo backup/restic check || fail "BACKUP CHECK FAILED!"
+
+notify-send "Backup checked successfully"