206 lines
10 KiB
Bash
206 lines
10 KiB
Bash
#!/bin/bash
|
||
# 统一备份脚本 — 支持远程模式（从本地 Mac 执行）和本地模式（在服务器上直接执行）
|
||
# 用法：bash backup.sh [--local] [--db-only|--full] [站点名...]
|
||
set -e
|
||
|
||
TIMESTAMP=$(date +%Y%m%d_%H%M%S)
|
||
LOCAL_DIR="/Users/niuniu/programs/docker/db-backups"
|
||
REMOTE_BASE="/root/docker"
|
||
CLOUD_DIR="/root/docker/db-backups"
|
||
MODE="remote"
|
||
|
||
log() { echo "[$(date '+%H:%M:%S')] $1"; }
|
||
warn() { echo "[$(date '+%H:%M:%S')] [警告] $1"; }
|
||
|
||
# 参数解析（提取 --local / --db-only / --full，其余为站点名）
|
||
ARGS=(); ACTION="default"
|
||
for arg in "$@"; do
|
||
case "$arg" in
|
||
--local) MODE="local" ;;
|
||
--db-only|--full) ACTION="${arg#--}" ;;
|
||
--help|-h) ACTION="help" ;;
|
||
*) ARGS+=("$arg") ;;
|
||
esac
|
||
done
|
||
|
||
# 远程/本地适配
|
||
runcmd() { [[ "$MODE" == "local" ]] && bash -c "$*" || ssh txjp "$*"; }
|
||
fetch() { [[ "$MODE" == "local" ]] && cp "$1" "$2" || scp "txjp:$1" "$2"; }
|
||
|
||
# === 自动发现含数据库的站点 ===
|
||
PROJECT_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
|
||
DB_SITES=""
|
||
for dir in "$PROJECT_ROOT"/*-ai/; do
|
||
s=$(basename "$dir"); [[ "$s" == "nginx-proxy-ai" ]] && continue
|
||
[ -f "$dir/docker-compose.yml" ] || continue
|
||
grep -qE "\.db|DATABASE_PATH|sqlite" "$dir/docker-compose.yml" 2>/dev/null || continue
|
||
s="${s%-ai}"; [[ "$s" == "oa" ]] && continue
|
||
DB_SITES="$DB_SITES $s"
|
||
done
|
||
|
||
container_for() { [[ "$1" == "ldap" ]] && echo "lldap" || echo "${1}-ai"; }
|
||
|
||
# === 模式 1：站点完整备份（默认）===
|
||
backup_site() {
|
||
local site="$1" backup_name="${site}-${TIMESTAMP}.tar.gz"
|
||
log "备份 ${site}..."
|
||
|
||
runcmd "rm -rf /tmp/backup-${site} && mkdir -p /tmp/backup-${site}/data"
|
||
|
||
case "$site" in
|
||
assets)
|
||
runcmd "docker exec assets-ai node -e \"const D=require('better-sqlite3');const db=new D('/app/data/assets.db');db.pragma('wal_checkpoint(TRUNCATE)');db.close();\"" 2>/dev/null || true
|
||
runcmd "docker cp assets-ai:/app/data/assets.db /tmp/backup-${site}/data/"
|
||
runcmd "cp -a /root/docker/assets-ai/data/uploads /tmp/backup-${site}/data/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/assets-ai/docker-compose.yml /tmp/backup-${site}/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/assets-ai/.env /tmp/backup-${site}/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/assets-ai/Dockerfile /tmp/backup-${site}/ 2>/dev/null || true"
|
||
;;
|
||
issue)
|
||
runcmd "docker exec issue-ai node -e \"const D=require('better-sqlite3');const db=new D('/app/data/issue.db');db.pragma('wal_checkpoint(TRUNCATE)');db.close();\"" 2>/dev/null || true
|
||
runcmd "docker cp issue-ai:/app/data/issue.db /tmp/backup-${site}/data/"
|
||
runcmd "cp -a /root/docker/issue-ai/data/uploads /tmp/backup-${site}/data/ 2>/dev/null || true"
|
||
runcmd "cp -a /root/docker/issue-ai/data/reports /tmp/backup-${site}/data/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/issue-ai/docker-compose.yml /tmp/backup-${site}/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/issue-ai/.env /tmp/backup-${site}/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/issue-ai/Dockerfile /tmp/backup-${site}/ 2>/dev/null || true"
|
||
;;
|
||
ldap)
|
||
runcmd "docker exec lldap sqlite3 /data/users.db 'PRAGMA wal_checkpoint(TRUNCATE);'" 2>/dev/null || true
|
||
runcmd "docker cp lldap:/data/users.db /tmp/backup-${site}/data/"
|
||
runcmd "cp /root/docker/ldap-ai/docker-compose.yml /tmp/backup-${site}/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/ldap-ai/.env /tmp/backup-${site}/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/ldap-ai/Dockerfile /tmp/backup-${site}/ 2>/dev/null || true"
|
||
;;
|
||
gitea)
|
||
runcmd "docker cp gitea-ai:/data/gitea.db /tmp/backup-${site}/data/"
|
||
runcmd "cp -a /root/docker/gitea-ai/data/git /tmp/backup-${site}/ 2>/dev/null || true"
|
||
runcmd "cp -a /root/docker/gitea-ai/data/gitea/conf /tmp/backup-${site}/gitea-conf 2>/dev/null || true"
|
||
runcmd "cp /root/docker/gitea-ai/docker-compose.yml /tmp/backup-${site}/ 2>/dev/null || true"
|
||
;;
|
||
oa)
|
||
runcmd "cp /root/docker/oa-ai/docker-compose.yml /tmp/backup-${site}/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/oa-ai/.env /tmp/backup-${site}/ 2>/dev/null || true"
|
||
;;
|
||
monitor)
|
||
runcmd "docker exec monitor-ai sqlite3 /app/data/monitor.db 'PRAGMA wal_checkpoint(TRUNCATE);'" 2>/dev/null || true
|
||
runcmd "docker cp monitor-ai:/app/data/monitor.db /tmp/backup-${site}/data/"
|
||
runcmd "cp /root/docker/monitor-ai/docker-compose.yml /tmp/backup-${site}/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/monitor-ai/.env /tmp/backup-${site}/ 2>/dev/null || true"
|
||
;;
|
||
*)
|
||
warn "${site}: 无专用备份逻辑，仅备份配置文件"
|
||
runcmd "cp /root/docker/${site}-ai/docker-compose.yml /tmp/backup-${site}/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/${site}-ai/.env /tmp/backup-${site}/ 2>/dev/null || true"
|
||
;;
|
||
esac
|
||
|
||
runcmd "cd /tmp && tar czf ${backup_name} backup-${site}/"
|
||
mkdir -p "${LOCAL_DIR}"
|
||
fetch "/tmp/${backup_name}" "${LOCAL_DIR}/"
|
||
runcmd "mkdir -p ${CLOUD_DIR} && cp /tmp/${backup_name} ${CLOUD_DIR}/"
|
||
runcmd "rm -rf /tmp/backup-${site} /tmp/${backup_name}"
|
||
log "${site} 备份完成: ${backup_name}"
|
||
}
|
||
|
||
backup_shared() {
|
||
local backup_name="shared-${TIMESTAMP}.tar.gz"
|
||
log "备份共享资源..."
|
||
runcmd "rm -rf /tmp/backup-shared && mkdir -p /tmp/backup-shared"
|
||
runcmd "mkdir -p /tmp/backup-shared/nginx && cp -a /root/docker/nginx-proxy-ai/conf.d/* /tmp/backup-shared/nginx/ 2>/dev/null || true"
|
||
runcmd "mkdir -p /tmp/backup-shared/ssl && cp -a /etc/letsencrypt/live /tmp/backup-shared/ssl/ 2>/dev/null || true && cp -a /etc/letsencrypt/archive /tmp/backup-shared/ssl/ 2>/dev/null || true && cp -a /etc/letsencrypt/renewal /tmp/backup-shared/ssl/ 2>/dev/null || true"
|
||
runcmd "cp /root/docker/nginx-proxy-ai/docker-compose.yml /tmp/backup-shared/ 2>/dev/null || true"
|
||
runcmd "cd /tmp && tar czf ${backup_name} backup-shared/"
|
||
mkdir -p "${LOCAL_DIR}"; fetch "/tmp/${backup_name}" "${LOCAL_DIR}/"
|
||
runcmd "mkdir -p ${CLOUD_DIR} && cp /tmp/${backup_name} ${CLOUD_DIR}/"
|
||
runcmd "rm -rf /tmp/backup-shared /tmp/${backup_name}"
|
||
log "共享资源备份完成: ${backup_name}"
|
||
}
|
||
|
||
# === 模式 2：仅数据库备份 ===
|
||
backup_db_only() {
|
||
log "开始数据库备份..."
|
||
|
||
for s in $DB_SITES; do
|
||
c=$(container_for "$s")
|
||
[[ "$s" == "ldap" ]] && runcmd "docker exec ${c} sqlite3 /data/users.db 'PRAGMA wal_checkpoint(TRUNCATE);' 2>/dev/null || true" &
|
||
[[ "$s" != "ldap" ]] && runcmd "docker exec ${c} sqlite3 /app/data/${s}.db 'PRAGMA wal_checkpoint(TRUNCATE);' 2>/dev/null || true" &
|
||
done; wait
|
||
|
||
runcmd "mkdir -p /tmp/db-backup"
|
||
for s in $DB_SITES; do
|
||
c=$(container_for "$s")
|
||
dbpath="/app/data/${s}.db"; [[ "$s" == "ldap" ]] && dbpath="/data/users.db"; [[ "$s" == "gitea" ]] && dbpath="/data/gitea.db"
|
||
log "备份 ${s}..."
|
||
runcmd "docker cp ${c}:${dbpath} /tmp/db-backup/${s}-${TIMESTAMP}.db"
|
||
done
|
||
|
||
mkdir -p "${LOCAL_DIR}"; runcmd "mkdir -p ${CLOUD_DIR}"
|
||
for s in $DB_SITES; do
|
||
runcmd "cp /tmp/db-backup/${s}-${TIMESTAMP}.db ${CLOUD_DIR}/"
|
||
fetch "/tmp/db-backup/${s}-${TIMESTAMP}.db" "${LOCAL_DIR}/"
|
||
f="${LOCAL_DIR}/${s}-${TIMESTAMP}.db"
|
||
sqlite3 "$f" "SELECT count(*) FROM sqlite_master" > /dev/null 2>&1 || warn "${s} 备份文件无效"
|
||
done
|
||
|
||
runcmd "rm -rf /tmp/db-backup"
|
||
log "数据库备份完成"
|
||
}
|
||
|
||
# === 模式 3：灾难恢复完整备份 ===
|
||
backup_full() {
|
||
log "开始完整灾难恢复备份..."
|
||
|
||
for s in $DB_SITES; do
|
||
c=$(container_for "$s")
|
||
[[ "$s" == "ldap" ]] && runcmd "docker exec ${c} sqlite3 /data/users.db 'PRAGMA wal_checkpoint(TRUNCATE);'" 2>/dev/null || true
|
||
[[ "$s" != "ldap" ]] && runcmd "docker exec ${c} sqlite3 /app/data/${s}.db 'PRAGMA wal_checkpoint(TRUNCATE);' 2>/dev/null || true" &
|
||
done; wait
|
||
|
||
runcmd "mkdir -p /tmp/full-backup/databases"
|
||
for s in $DB_SITES; do
|
||
c=$(container_for "$s")
|
||
dbpath="/app/data/${s}.db"; [[ "$s" == "ldap" ]] && dbpath="/data/users.db"; [[ "$s" == "gitea" ]] && dbpath="/data/gitea.db"
|
||
runcmd "docker cp ${c}:${dbpath} /tmp/full-backup/databases/${s}.db"
|
||
done
|
||
|
||
runcmd "mkdir -p /tmp/full-backup/gitea && cp -a /root/docker/gitea-ai/data/git /tmp/full-backup/gitea/ && cp -a /root/docker/gitea-ai/data/gitea/conf /tmp/full-backup/gitea/ 2>/dev/null || true"
|
||
runcmd "mkdir -p /tmp/full-backup/uploads && cp -a /root/docker/assets-ai/data/uploads /tmp/full-backup/uploads/assets-uploads 2>/dev/null || true && cp -a /root/docker/issue-ai/data/uploads /tmp/full-backup/uploads/issue-uploads 2>/dev/null || true && cp -a /root/docker/issue-ai/data/reports /tmp/full-backup/uploads/issue-reports 2>/dev/null || true"
|
||
runcmd "mkdir -p /tmp/full-backup/nginx && cp -a /root/docker/nginx-proxy-ai/conf.d/* /tmp/full-backup/nginx/ 2>/dev/null || true"
|
||
runcmd "mkdir -p /tmp/full-backup/ssl && cp -a /etc/letsencrypt/live /tmp/full-backup/ssl/ 2>/dev/null || true && cp -a /etc/letsencrypt/archive /tmp/full-backup/ssl/ 2>/dev/null || true && cp -a /etc/letsencrypt/renewal /tmp/full-backup/ssl/ 2>/dev/null || true"
|
||
|
||
local name="full-backup-${TIMESTAMP}"
|
||
runcmd "cd /tmp && tar czf ${name}.tar.gz full-backup/"
|
||
mkdir -p "${LOCAL_DIR}"; fetch "/tmp/${name}.tar.gz" "${LOCAL_DIR}/"
|
||
runcmd "mkdir -p ${CLOUD_DIR} && cp /tmp/${name}.tar.gz ${CLOUD_DIR}/"
|
||
runcmd "rm -rf /tmp/full-backup /tmp/${name}.tar.gz"
|
||
log "完整备份完成: ${name}.tar.gz"
|
||
}
|
||
|
||
# === 主流程 ===
|
||
case "$ACTION" in
|
||
help)
|
||
echo "用法: bash backup.sh [--local] [--db-only|--full] [站点名...]"
|
||
echo " --local 本地模式（直接在服务器上运行）"
|
||
echo " 无参数 站点完整备份（全部含 DB 站点）"
|
||
echo " --db-only 仅数据库备份"
|
||
echo " --full 灾难恢复完整备份"
|
||
echo " 站点名... 备份指定站点"
|
||
;;
|
||
db-only) backup_db_only ;;
|
||
full) backup_full ;;
|
||
*)
|
||
TARGETS="${ARGS[*]:-all}"
|
||
log "站点完整备份: ${TARGETS} (模式: ${MODE})"
|
||
if [[ "$TARGETS" == "all" ]]; then
|
||
for site in $DB_SITES oa; do backup_site "$site"; done
|
||
backup_shared
|
||
else
|
||
for site in $TARGETS; do backup_site "$site"; done
|
||
fi
|
||
;;
|
||
esac
|
||
|
||
echo ""; log "备份完成！"
|
||
ls -lh ${LOCAL_DIR}/*-${TIMESTAMP}* 2>/dev/null
|