backup.sh
bash
sha256:34035d72cef530c1ab9d6a6f53be18d803dde705fc3157617d70352a96d0747b
Merge branch 'fix/wire-push-external-parent-manifest' into dev
Human
8 days ago
| 1 | #!/usr/bin/env bash |
| 2 | # Postgres daily backup script — run via cron on the EC2 instance. |
| 3 | # |
| 4 | # Two-tier backup strategy: |
| 5 | # 1. Local dump → /opt/backups/musehub/ (fast restore, 14-day rotation) |
| 6 | # 2. R2 upload → r2://BACKUP_R2_BUCKET/musehub-db/ (off-disk, long retention) |
| 7 | # |
| 8 | # R2 upload requires: |
| 9 | # - rclone installed: sudo apt-get install rclone |
| 10 | # - rclone configured with an R2 remote named "r2": |
| 11 | # rclone config (add remote → S3-compatible → Cloudflare R2) |
| 12 | # - BACKUP_R2_BUCKET set in /opt/musehub/.env, e.g.: |
| 13 | # BACKUP_R2_BUCKET=musehub-backups |
| 14 | # If BACKUP_R2_BUCKET is unset or rclone is not installed, the script |
| 15 | # continues with local-only backup and emits a warning. |
| 16 | # |
| 17 | # Install (on EC2): |
| 18 | # sudo mkdir -p /opt/backups/musehub |
| 19 | # sudo chown ubuntu:ubuntu /opt/backups/musehub |
| 20 | # chmod +x /opt/musehub/deploy/backup.sh |
| 21 | # crontab -e |
| 22 | # # Add this line (runs daily at 3 AM): |
| 23 | # 0 3 * * * /opt/musehub/deploy/backup.sh >> /var/log/musehub-backup.log 2>&1 |
| 24 | |
| 25 | set -euo pipefail |
| 26 | |
| 27 | APP_DIR="/opt/musehub" |
| 28 | BACKUP_DIR="/opt/backups/musehub" |
| 29 | TIMESTAMP=$(date +%Y%m%d_%H%M%S) |
| 30 | BACKUP_FILE="$BACKUP_DIR/musehub_${TIMESTAMP}.sql.gz" |
| 31 | RETAIN_DAYS=14 |
| 32 | |
| 33 | mkdir -p "$BACKUP_DIR" |
| 34 | |
| 35 | echo "[$(date)] Starting backup..." |
| 36 | |
| 37 | # Load DB_PASSWORD and optional BACKUP_R2_BUCKET from the app's .env |
| 38 | DB_PASSWORD=$(grep '^DB_PASSWORD=' "$APP_DIR/.env" | cut -d'=' -f2-) |
| 39 | BACKUP_R2_BUCKET=$(grep '^BACKUP_R2_BUCKET=' "$APP_DIR/.env" 2>/dev/null | cut -d'=' -f2- || true) |
| 40 | |
| 41 | sudo docker compose -f "$APP_DIR/docker-compose.yml" exec -T postgres \ |
| 42 | env PGPASSWORD="$DB_PASSWORD" \ |
| 43 | pg_dump -U musehub musehub \ |
| 44 | | gzip > "$BACKUP_FILE" |
| 45 | |
| 46 | echo "[$(date)] Backup written: $BACKUP_FILE ($(du -sh "$BACKUP_FILE" | cut -f1))" |
| 47 | |
| 48 | # ── Off-disk: sync to Cloudflare R2 ────────────────────────────────────────── |
| 49 | # Keeps backups on a separate storage medium — survives disk failure on the |
| 50 | # EC2 instance. rclone copy is idempotent (skips already-uploaded files). |
| 51 | if [[ -n "${BACKUP_R2_BUCKET:-}" ]] && command -v rclone &>/dev/null; then |
| 52 | echo "[$(date)] Syncing backup to R2 bucket: ${BACKUP_R2_BUCKET}..." |
| 53 | rclone copy "$BACKUP_FILE" "r2:${BACKUP_R2_BUCKET}/musehub-db/" \ |
| 54 | --s3-chunk-size=128M \ |
| 55 | --s3-upload-concurrency=4 \ |
| 56 | --stats=30s |
| 57 | echo "[$(date)] R2 upload complete." |
| 58 | |
| 59 | # Remove R2 copies older than 90 days (long-term retention). |
| 60 | rclone delete "r2:${BACKUP_R2_BUCKET}/musehub-db/" \ |
| 61 | --min-age=90d \ |
| 62 | --include "musehub_*.sql.gz" || true |
| 63 | echo "[$(date)] R2 old-backup rotation complete." |
| 64 | else |
| 65 | echo "[$(date)] WARNING: BACKUP_R2_BUCKET not set or rclone not installed — local-only backup." |
| 66 | echo "[$(date)] To enable off-disk backups: install rclone, configure an R2 remote," |
| 67 | echo "[$(date)] and set BACKUP_R2_BUCKET=<your-bucket-name> in $APP_DIR/.env" |
| 68 | fi |
| 69 | |
| 70 | echo "[$(date)] Removing local backups older than $RETAIN_DAYS days..." |
| 71 | find "$BACKUP_DIR" -name "musehub_*.sql.gz" -mtime "+$RETAIN_DAYS" -delete |
| 72 | |
| 73 | echo "[$(date)] Backup complete. Local files kept:" |
| 74 | ls -lh "$BACKUP_DIR" |
File History
14 commits
sha256:34035d72cef530c1ab9d6a6f53be18d803dde705fc3157617d70352a96d0747b
Merge branch 'fix/wire-push-external-parent-manifest' into dev
Human
8 days ago
sha256:fc04e4cae9e1774d6a21b65c45daeed0e6787eb581d13aa1b03bfe9384a34226
Merge branch 'fix/two-column-scroll-layout' into dev
Human
8 days ago
sha256:408916fc5973ba59c6e4eebaa80ebdcc801c0a63205651e25009d11548f79454
chore: bump version to 0.2.0.dev2 — nightly.2, matching muse
Sonnet 4.6
patch
11 days ago
sha256:d035733f21ccff27735fddebfbbe0ed24565a32a22db8de5885402262671ecd2
chore: bump version to 0.2.0rc15 for musehub#113 fix release
Sonnet 4.6
patch
14 days ago
sha256:0032d6cfa33bc3c8367436ad768e7dd0e339b4332153160247da8266cb5fa352
Merge branch 'task/version-tags-phase3-server' into dev
Human
17 days ago
sha256:4669620efda9ff41c55bdefd1f7bfe1c239d468428744c84ead9957e5a003a53
merge: rescue snapshot-recovery hardening (c00aa21d) into d…
Opus 4.8
minor
⚠
29 days ago
sha256:a59da49c4611b970fc4b6ae48678ce4943261c213a07ddbd73ce9201df869b4a
fix: remove false-positive proposal_comments index drop fro…
Sonnet 4.6
patch
33 days ago
sha256:0a240d6dbff234f07d98a28a4a9a68db702f3f9ff9260196f24219bdb1c0b6f3
feat: render markdown mists as HTML with heading anchor links
Sonnet 4.6
patch
34 days ago
sha256:24a7d47486ebc4ebd1832830580e177ec6f877b48dced8c000e198cdec4ce9d6
Merge 'task/bump-version-rc12' into 'dev' — proposal: Bump …
Human
35 days ago
sha256:b9ff931d147e0114a1f17060f415b89ed551c170a91ff226c70437aa5c85f9ee
Merge 'task/bump-version-rc12' into 'dev' — proposal: Bump …
Human
35 days ago
sha256:d1122d21e73471879b460037b22c0b50fded7c423444a176f248428f75dac39c
Merge 'task/fix-issue-pagination-cursor' into 'dev' — propo…
Human
35 days ago
sha256:01e18975e73d2b3cd5b6db7929c895bef9aa6e0d4391dc5b2adfc548b41318dd
Merge 'feat/adding-debug-logs-to-staging' into 'dev' — prop…
Human
35 days ago
sha256:6b1949fc2797ca4c1936a637a4cbfec828ef56cf52398a2e74ca3c4f494e728f
fix: use wire_bytes not mpack_bytes_raw in compute_object_b…
Sonnet 4.6
patch
48 days ago
sha256:b99f2455dc346966d040133f5203297e6e3ef5803a93728a2c30568d0a0f7583
rename: delta_add → delta_upsert across wire format, models…
Sonnet 4.6
patch
50 days ago