backup: Prune old backups

[bin.git] / backup

diff --git a/backup b/backup
index bbca65e02316c5148e3bd5b5fb554292ad41de6a..e181d467ee19802d0fbfa2c636858f53df4ec74b 100755 (executable)
--- a/backup
+++ b/backup
@@ -6,7 +6,7 @@ PATH=$PATH:/sbin:/usr/sbin
 RESTIC="restic --password-file $HOME/.config/backup-passphrase --repo sftp:piware.de:backup/restic"
 
 fail() {
-    notify-send -i network-error-symbolic -u critical -t 180 "${1:-BACKUP FAILED!}"
+    notify-send -i /usr/share/icons/Adwaita/48x48/status/network-error-symbolic.symbolic.png -u critical -t 180000 "${1:-BACKUP FAILED!}"
     exit 1
 }
 
@@ -40,5 +40,12 @@ $RESTIC backup --exclude-file=$HOME/.config/backup-ignore $HOME || fail
 # TODO: forget --prune policy: https://restic.readthedocs.io/en/stable/060_forget.html
 notify-send "Backup finished successfully"
 
-$RESTIC check || fail "BACKUP CHECK FAILED!"
+scp .config/backup-passphrase piware.de:.cache/
+ssh piware.de chmod u+w .cache/backup-passphrase
+trap "ssh piware.de shred -u .cache/backup-passphrase" EXIT INT QUIT PIPE
+
+ssh piware.de restic --password-file .cache/backup-passphrase --repo backup/restic forget --prune --keep-within-hourly 24h --keep-within-daily 7d --keep-within-weekly 30d --keep-within-monthly 12m
+notify-send "Backup pruned successfully"
+
+ssh piware.de restic --password-file .cache/backup-passphrase --repo backup/restic check || fail "BACKUP CHECK FAILED!"
 notify-send "Backup checked successfully"