first commit

borg/bin/backup

@@ -0,0 +1,80 @@
+#!/usr/bin/env bash
+
+# Check if running as root
+if [ "$EUID" -ne 0 ]; then
+    printf "Error: This script must be run as root (or via sudo).\n"
+    exit 1
+fi
+
+# Load the environment variables directly
+if [ -f /opt/borg/etc/borg_environment ]; then
+    # shellcheck source=/dev/null
+    source /opt/borg/etc/borg_environment
+    
+    # Ensure the variables sourced from the file are exported to child processes
+    export BORG_REPO BORG_PASSPHRASE
+else
+    printf "Error: /opt/borg/etc/borg_environment not found.\n"
+    exit 1
+fi
+
+# Helpers and error handling
+info() { printf "\n%s %s\n\n" "$(date)" "$*" >&2; }
+trap 'info "Backup interrupted"; exit 2' INT TERM
+
+info "Starting backup for repository: $BORG_REPO"
+
+# 1. Create Archive
+borg create                         \
+    --verbose                       \
+    --filter AME                    \
+    --list                          \
+    --stats                         \
+    --show-rc                       \
+    --compression lz4               \
+    --exclude-caches                \
+    --exclude 'home/*/.cache/*'     \
+    --exclude 'var/tmp/*'           \
+    --exclude 'var/games'           \
+    --exclude 'home/*/Media'        \
+    --progress                      \
+    ::'{hostname}-{now}'            \
+    /etc                            \
+    /home                           \
+    /root                           \
+    /var                            \
+    /opt
+
+backup_exit=$?
+
+# 2. Prune old backups
+info "Pruning repository"
+borg prune                          \
+    --list                          \
+    --glob-archives '{hostname}-*'  \
+    --show-rc                       \
+    --keep-daily    7               \
+    --keep-weekly   4               \
+    --keep-monthly  6
+
+prune_exit=$?
+
+# 3. Compact repository
+info "Compacting repository"
+borg compact
+
+compact_exit=$?
+
+# Determine final status code
+global_exit=$(( backup_exit > prune_exit ? backup_exit : prune_exit ))
+global_exit=$(( compact_exit > global_exit ? compact_exit : global_exit ))
+
+if [ "${global_exit}" -eq 0 ]; then
+    info "Backup, Prune, and Compact finished successfully"
+elif [ "${global_exit}" -eq 1 ]; then
+    info "Backup, Prune, and/or Compact finished with warnings"
+else
+    info "Backup, Prune, and/or Compact finished with errors"
+fi
+
+exit "${global_exit}"

borg/bin/reposetup

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+
+# Ensure running as root to read the environment file
+if [ "$EUID" -ne 0 ]; then
+    printf "Error: This script must be run as root (or via sudo).\n"
+    exit 1
+fi
+
+# Load the environment variables
+if [ -f /opt/borg/etc/borg_environment ]; then
+    # shellcheck source=/dev/null
+    source /opt/borg/etc/borg_environment
+    export BORG_REPO BORG_PASSPHRASE
+else
+    printf "Error: /opt/borg/etc/borg_environment not found.\n"
+    exit 1
+fi
+
+printf "Checking repository status at: %s\n" "$BORG_REPO"
+
+# Check if the repo already exists to prevent accidental re-init
+if borg info >/dev/null 2>&1; then
+    printf "Error: Repository already exists and is initialized.\n"
+    exit 1
+fi
+
+printf "Initializing repository...\n"
+
+# Logic for encryption mode based on whether a passphrase exists
+if [ -z "$BORG_PASSPHRASE" ]; then
+    printf "No passphrase detected. Initializing with 'none' encryption.\n"
+    borg init --encryption=none
+else
+    printf "Passphrase detected. Initializing with 'repokey' encryption.\n"
+    # repokey stores the key inside the repository config, protected by the passphrase
+    borg init --encryption=repokey
+fi
+
+init_exit=$?
+
+if [ "$init_exit" -eq 0 ]; then
+    printf "\nSuccess: Repository initialized successfully.\n"
+    printf "You can now run your first backup using: sudo /opt/borg/bin/backup\n"
+else
+    printf "\nError: Repository initialization failed (Exit code: %s).\n" "$init_exit"
+    exit "$init_exit"
+fi

borg/etc/borg_environment

@@ -0,0 +1,6 @@
+# Setting this, so the repo does not need to be given on the commandline:
+export BORG_REPO=REPOPATH
+
+# See the section "Passphrase notes" for more infos.
+export BORG_PASSPHRASE='REPOPASSPHRASE'
+