Add backup service

all.do

@@ -1 +0,0 @@
-redo services/web/run

env.production

@@ -0,0 +1 @@
+DOMAIN=scorpius

readme

@@ -2,16 +2,20 @@
 
 Install [redo](https://redo.readthedocs.io)
 
-    sudo apt install --yes redo || brew install redo
+    brew install redo || sudo apt install --yes redo
 
-Build the services you want
+Run the services you want
 
-    redo services/caddy
+    redo services/web/run
+
+Make sure to enable backups
+
+    redo services/backup/run
 
 ## beta release
 
 - [*] caddy with landing page of this readme
-- [ ] backup
+- [*] backup using duplicity uploaded to backblaze b2
 - [ ] zitadel sso
 - [ ] bookstack wiki
 - [ ] caddy webdav for personal home pages

services/backup/readme

@@ -0,0 +1,8 @@
+We currently support duplicity backing up to backblaze B2 storage.
+
+You will need to populate `secrets/backup` with:
+
+  - application-key & application-key-id from backblaze b2 commandline or web
+  - passphrase for gnupg encrypted backups
+
+This will create a new bucket named ${HOSTNAME}-backup

services/backup/run.do

@@ -0,0 +1,19 @@
+. ../../env.production
+
+service=$(basename $PWD)
+secrets="../../secrets/$service"
+
+redo-ifchange ../../env.production \
+  $secrets/application-key-id \
+  $secrets/application-key \
+  $secrets/passphrase
+
+read B2_APPLICATION_KEY_ID < $secrets/application-key-id
+read B2_APPLICATION_KEY < $secrets/application-key
+export BUCKET_NAME=${DOMAIN}-backup
+
+export DESTINATION=b2://${B2_APPLICATION_KEY_ID}:${B2_APPLICATION_KEY}@${BUCKET_NAME}
+
+read PASSPHRASE < $secrets/passphrase
+env PASSPHRASE=$PASSPHRASE duplicity backup ../../data $DESTINATION >&2
+env PASSPHRASE=$PASSPHRASE duplicity remove-older-than 28D $DESTINATION >&2