Create restore.sh

restore.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+WORKDIR=/tmp/gotify_restore
+mkdir -p $WORKDIR
+
+if [ -z "${GITHUB_TOKEN:-}" ]; then
+  echo "[restore] ERROR: GITHUB_TOKEN not set"
+  exit 1
+fi
+
+echo "[restore] Cloning repo..."
+git clone --depth 1 "https://${GITHUB_TOKEN}@${GITHUB_REPO#https://}" $WORKDIR
+
+if [ -f "$WORKDIR/$BACKUP_FILE" ]; then
+  echo "[restore] Found backup, decrypting..."
+  openssl enc -d -aes-256-cbc -pbkdf2 -iter 100000 \
+    -in "$WORKDIR/$BACKUP_FILE" \
+    -out "$GOTIFY_DATABASE_PATH" \
+    -k "$ENCRYPTION_KEY"
+  echo "[restore] Restored DB to $GOTIFY_DATABASE_PATH"
+else
+  echo "[restore] No backup file in repo, skipping."
+fi