♻️ refactor(migration): Retire l'usage de docker dans backup.sh et restore.sh, utilise pg_dump/psql et tar directement sur l'hôte avec DATABASE_URL.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Serreau Jovann
109
backup.sh
109
backup.sh
@@ -4,14 +4,15 @@ set -eu
|
||||
# ============================================================================
|
||||
# E-COSPLAY - Script de sauvegarde pour migration vers un autre serveur
|
||||
# ----------------------------------------------------------------------------
|
||||
# Sauvegarde :
|
||||
# - Base de données PostgreSQL (pg_dump logique)
|
||||
# - Volume MinIO (fichiers utilisateurs / médias)
|
||||
# - Volume Vault (secrets HashiCorp Vault)
|
||||
# - Fichiers d'environnement (.env.local, google.json, account.json)
|
||||
# N'UTILISE PAS DOCKER. S'appuie sur les binaires installés sur l'hôte
|
||||
# (pg_dump, psql, tar, gzip) et lit DATABASE_URL depuis .env.local.
|
||||
#
|
||||
# Le tout est empaqueté dans une archive tar.gz horodatée, prête à être
|
||||
# transférée (scp/rsync) puis restaurée avec restore.sh sur le nouveau serveur.
|
||||
# Sauvegarde :
|
||||
# - Base PostgreSQL distante via DATABASE_URL (pg_dump logique)
|
||||
# - Fichiers uploadés (public/storage)
|
||||
# - Fichiers d'environnement et credentials (.env.local, google.json, ...)
|
||||
#
|
||||
# Le tout est empaqueté dans une archive tar.gz horodatée.
|
||||
# ============================================================================
|
||||
|
||||
RED='\033[0;31m'
|
||||
@@ -28,12 +29,7 @@ BACKUP_DIR="${BACKUP_DIR:-$PROJECT_DIR/var/backups}"
|
||||
WORK_DIR="$BACKUP_DIR/tmp_$TIMESTAMP"
|
||||
ARCHIVE="$BACKUP_DIR/e-cosplay_backup_$TIMESTAMP.tar.gz"
|
||||
|
||||
DB_CONTAINER="${DB_CONTAINER:-e-cosplay_db}"
|
||||
DB_NAME="${DB_NAME:-app_db}"
|
||||
DB_USER="${DB_USER:-symfony_user}"
|
||||
|
||||
MINIO_CONTAINER="${MINIO_CONTAINER:-e-cosplay_minio}"
|
||||
VAULT_CONTAINER="${VAULT_CONTAINER:-e-cosplay_vault}"
|
||||
STORAGE_DIR="${STORAGE_DIR:-public/storage}"
|
||||
|
||||
echo "${CYAN}############################${RESET}"
|
||||
echo "${CYAN}# E-COSPLAY BACKUP START #${RESET}"
|
||||
@@ -43,51 +39,67 @@ echo "${CYAN}Destination : ${ARCHIVE}${RESET}"
|
||||
mkdir -p "$WORK_DIR"
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# 1) Vérifie que docker tourne et que les conteneurs sont up
|
||||
# 1) Vérifications
|
||||
# ---------------------------------------------------------------------------
|
||||
if ! command -v docker >/dev/null 2>&1; then
|
||||
echo "${RED}docker introuvable dans le PATH${RESET}" >&2
|
||||
for bin in pg_dump tar gzip; do
|
||||
if ! command -v "$bin" >/dev/null 2>&1; then
|
||||
echo "${RED}Binaire introuvable : $bin${RESET}" >&2
|
||||
exit 1
|
||||
fi
|
||||
done
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# 2) Récupération de DATABASE_URL
|
||||
# Priorité : variable d'env existante > .env.local > .env.prod.local > .env
|
||||
# ---------------------------------------------------------------------------
|
||||
get_database_url() {
|
||||
if [ -n "${DATABASE_URL:-}" ]; then
|
||||
echo "$DATABASE_URL"
|
||||
return 0
|
||||
fi
|
||||
for f in .env.local .env.prod.local .env.prod .env; do
|
||||
if [ -f "$PROJECT_DIR/$f" ]; then
|
||||
url="$(grep -E '^DATABASE_URL=' "$PROJECT_DIR/$f" | tail -n1 | sed -E 's/^DATABASE_URL=//; s/^"(.*)"$/\1/; s/^'"'"'(.*)'"'"'$/\1/')"
|
||||
if [ -n "$url" ]; then
|
||||
echo "$url"
|
||||
return 0
|
||||
fi
|
||||
fi
|
||||
done
|
||||
return 1
|
||||
}
|
||||
|
||||
DATABASE_URL_RAW="$(get_database_url || true)"
|
||||
if [ -z "$DATABASE_URL_RAW" ]; then
|
||||
echo "${RED}DATABASE_URL introuvable (ni en env, ni dans .env.local/.env)${RESET}" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
ensure_running() {
|
||||
name="$1"
|
||||
if ! docker ps --format '{{.Names}}' | grep -q "^${name}$"; then
|
||||
echo "${ORANGE}> Conteneur ${name} arrêté, démarrage...${RESET}"
|
||||
docker compose up -d "$(echo "$name" | sed 's/^e-cosplay_//')" || true
|
||||
sleep 3
|
||||
fi
|
||||
}
|
||||
# Strip des paramètres Doctrine (serverVersion, charset, ...) que libpq ignore
|
||||
DATABASE_URL_CLEAN="$(echo "$DATABASE_URL_RAW" | sed -E 's/\?.*$//')"
|
||||
|
||||
ensure_running "$DB_CONTAINER"
|
||||
ensure_running "$MINIO_CONTAINER"
|
||||
ensure_running "$VAULT_CONTAINER"
|
||||
# Affiche une URL masquée (cache le mot de passe)
|
||||
DATABASE_URL_MASKED="$(echo "$DATABASE_URL_CLEAN" | sed -E 's#(://[^:]+:)[^@]+(@)#\1***\2#')"
|
||||
echo "${CYAN}> DATABASE_URL : ${DATABASE_URL_MASKED}${RESET}"
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# 2) Dump PostgreSQL (logique, portable entre versions mineures)
|
||||
# 3) Dump PostgreSQL
|
||||
# ---------------------------------------------------------------------------
|
||||
echo "${CYAN}> Dump de la base PostgreSQL (${DB_NAME})...${RESET}"
|
||||
docker exec -t "$DB_CONTAINER" \
|
||||
pg_dump -U "$DB_USER" -d "$DB_NAME" --clean --if-exists --no-owner --no-privileges \
|
||||
echo "${CYAN}> Dump PostgreSQL...${RESET}"
|
||||
pg_dump "$DATABASE_URL_CLEAN" \
|
||||
--clean --if-exists --no-owner --no-privileges \
|
||||
| gzip -9 > "$WORK_DIR/database.sql.gz"
|
||||
echo "${GREEN} ✓ database.sql.gz ($(du -h "$WORK_DIR/database.sql.gz" | cut -f1))${RESET}"
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# 3) Snapshot des données MinIO (tar du dossier /data du conteneur)
|
||||
# 4) Fichiers uploadés
|
||||
# ---------------------------------------------------------------------------
|
||||
echo "${CYAN}> Sauvegarde des données MinIO...${RESET}"
|
||||
docker exec "$MINIO_CONTAINER" tar -C /data -czf - . > "$WORK_DIR/minio_data.tar.gz"
|
||||
echo "${GREEN} ✓ minio_data.tar.gz ($(du -h "$WORK_DIR/minio_data.tar.gz" | cut -f1))${RESET}"
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# 4) Snapshot des données Vault
|
||||
# ---------------------------------------------------------------------------
|
||||
echo "${CYAN}> Sauvegarde des données Vault...${RESET}"
|
||||
if docker exec "$VAULT_CONTAINER" sh -c '[ -d /vault ]' 2>/dev/null; then
|
||||
docker exec "$VAULT_CONTAINER" tar -C /vault -czf - . > "$WORK_DIR/vault_data.tar.gz"
|
||||
echo "${GREEN} ✓ vault_data.tar.gz ($(du -h "$WORK_DIR/vault_data.tar.gz" | cut -f1))${RESET}"
|
||||
if [ -d "$PROJECT_DIR/$STORAGE_DIR" ]; then
|
||||
echo "${CYAN}> Sauvegarde de ${STORAGE_DIR}...${RESET}"
|
||||
tar -C "$PROJECT_DIR" -czf "$WORK_DIR/storage.tar.gz" "$STORAGE_DIR"
|
||||
echo "${GREEN} ✓ storage.tar.gz ($(du -h "$WORK_DIR/storage.tar.gz" | cut -f1))${RESET}"
|
||||
else
|
||||
echo "${ORANGE} ! /vault introuvable, vault ignoré${RESET}"
|
||||
echo "${ORANGE} ! ${STORAGE_DIR} introuvable, étape ignorée${RESET}"
|
||||
fi
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
@@ -103,18 +115,15 @@ for f in .env .env.local .env.prod .env.prod.local google.json account.json; do
|
||||
done
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# 6) Métadonnées (utiles côté restore pour vérifier la cohérence)
|
||||
# 6) Métadonnées
|
||||
# ---------------------------------------------------------------------------
|
||||
{
|
||||
echo "timestamp=$TIMESTAMP"
|
||||
echo "hostname=$(hostname)"
|
||||
echo "git_commit=$(git -C "$PROJECT_DIR" rev-parse HEAD 2>/dev/null || echo unknown)"
|
||||
echo "git_branch=$(git -C "$PROJECT_DIR" rev-parse --abbrev-ref HEAD 2>/dev/null || echo unknown)"
|
||||
echo "db_container=$DB_CONTAINER"
|
||||
echo "db_name=$DB_NAME"
|
||||
echo "db_user=$DB_USER"
|
||||
echo "minio_container=$MINIO_CONTAINER"
|
||||
echo "vault_container=$VAULT_CONTAINER"
|
||||
echo "database_url=$DATABASE_URL_MASKED"
|
||||
echo "storage_dir=$STORAGE_DIR"
|
||||
} > "$WORK_DIR/manifest.txt"
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
|
||||
Reference in New Issue
Block a user