Light1YT
6883d14177
Some checks failed
CI / changes (push) Successful in 7s
CI / backend-tests (push) Has been skipped
CI / frontend-tests (push) Has been skipped
CI / changes (pull_request) Successful in 6s
CI / backend-tests (pull_request) Has been skipped
CI / frontend-tests (pull_request) Has been skipped
Deploy / build-backend (push) Blocked by required conditions
Deploy / build-worker (push) Blocked by required conditions
Deploy / build-frontend (push) Blocked by required conditions
Deploy / deploy (push) Blocked by required conditions
Deploy / changes (push) Has been cancelled
#71 (CRITICAL): backup.sh committed 100644 → git reset --hard on deploy re-asserts non-exec mode → raw-path cron fails Permission denied (last good dump 2026-05-27, no S3). Commit 100755 + chmod ops/*.sh in deploy.yml + size sanity-check (never prune good dumps for a truncated one) + keep-N retention + optional S3 (redacted /etc/default template). Modeled on the working backup-tradein-db.sh. #427: widen basic_auth username regex ^[a-z][a-z0-9_.-]{1,62}$ + literal-escape dotted names in grep probes. #429: replace list_users.sh false-positive grep with anchored awk over basic_auth block. #428: PILOT_ACCESS.md support email → pilot@gendsgn.ru. Closes #71 Closes #427 Closes #429 Closes #428
21 lines
1.1 KiB
Text
21 lines
1.1 KiB
Text
# Environment file for ops/backup.sh (MAIN gendesign DB backup, #71).
|
|
#
|
|
# Install on the prod VM as a ROOT-OWNED, chmod-600 file that is NOT in git:
|
|
# sudo cp /opt/gendesign/ops/gendesign-backup.default.example /etc/default/gendesign-backup
|
|
# sudo chmod 600 /etc/default/gendesign-backup
|
|
# sudo $EDITOR /etc/default/gendesign-backup # fill in real S3 credentials
|
|
#
|
|
# backup.sh sources this file if present. With NO S3 vars set, dumps stay
|
|
# local-only under /opt/gendesign/backups (retention KEEP=7). Fill these in to
|
|
# also push each dump off-box to S3 (recommended — local-only dies with the VM).
|
|
|
|
# --- S3 off-site upload (Selectel S3-compatible). All four required to enable. ---
|
|
#S3_ENDPOINT=https://s3.ru-1.storage.selcloud.ru
|
|
#S3_BUCKET=gendesign-backups
|
|
#S3_ACCESS_KEY=REPLACE_WITH_REAL_ACCESS_KEY
|
|
#S3_SECRET_KEY=REPLACE_WITH_REAL_SECRET_KEY
|
|
|
|
# --- optional overrides (defaults are sensible; uncomment only to change) ---
|
|
#KEEP=7 # how many recent local dumps to retain
|
|
#MIN_DUMP_BYTES=51200 # sanity floor; a dump smaller than this is treated as failed
|
|
#LOCAL_BACKUP_DIR=/opt/gendesign/backups
|