Delete backup.sh

backup.sh

@@ -1,95 +0,0 @@
-#!/usr/bin/env bash
-###############################################################################
-# backup.sh
-#
-# Creates a timestamped backup bundle containing:
-#   1. A full Supabase Postgres dump (pg_dump, custom format).
-#   2. An export of every n8n workflow (n8n export:workflow --all).
-#   3. An export of every n8n credential, STILL ENCRYPTED with
-#      N8N_ENCRYPTION_KEY (n8n export:credentials --all).
-#
-# Run manually:      ./backup.sh
-# Run inside the container (e.g. via `docker exec`):
-#                     docker exec <container> /app/backup.sh
-# Or schedule it (see docs/BACKUP.md for a cron / HF Space "scheduled job"
-# example, since HF Spaces itself has no built-in cron).
-#
-# IMPORTANT: The credential export is only as safe as N8N_ENCRYPTION_KEY.
-# Store backups somewhere access-controlled, and store the encryption key
-# separately from the backups themselves.
-###############################################################################
-set -euo pipefail
-
-BACKUP_DIR="${BACKUP_DIR:-/data/backups}"
-RETENTION_DAYS="${BACKUP_RETENTION_DAYS:-14}"
-TIMESTAMP="$(date -u +'%Y%m%d-%H%M%S')"
-BUNDLE_DIR="${BACKUP_DIR}/${TIMESTAMP}"
-
-log() {
-    echo "[backup] $(date -u +'%Y-%m-%dT%H:%M:%SZ') $*"
-}
-
-mkdir -p "$BUNDLE_DIR"
-log "Writing backup bundle to $BUNDLE_DIR"
-
-# --- 1. Database dump ---------------------------------------------------------
-if [ -n "${SUPABASE_DB_URL:-}" ]; then
-    DB_URL="$SUPABASE_DB_URL"
-elif [ -n "${DB_POSTGRESDB_HOST:-}" ]; then
-    DB_URL="postgresql://${DB_POSTGRESDB_USER}:${DB_POSTGRESDB_PASSWORD}@${DB_POSTGRESDB_HOST}:${DB_POSTGRESDB_PORT:-5432}/${DB_POSTGRESDB_DATABASE}?sslmode=require"
-else
-    log "ERROR: Neither SUPABASE_DB_URL nor DB_POSTGRESDB_* variables are set. Cannot back up database."
-    exit 1
-fi
-
-log "Dumping Supabase Postgres database (pg_dump, custom format)..."
-if pg_dump --format=custom --no-owner --no-privileges --dbname="$DB_URL" \
-        --file="${BUNDLE_DIR}/database.dump"; then
-    log "Database dump complete: ${BUNDLE_DIR}/database.dump"
-else
-    log "ERROR: pg_dump failed."
-    exit 1
-fi
-
-# --- 2. Workflow export --------------------------------------------------------
-log "Exporting n8n workflows..."
-mkdir -p "${BUNDLE_DIR}/workflows"
-if command -v n8n >/dev/null 2>&1; then
-    n8n export:workflow --all --output="${BUNDLE_DIR}/workflows/" --separate || \
-        log "WARNING: workflow export reported an error (n8n may not be running)."
-else
-    log "WARNING: 'n8n' CLI not found in this shell; skipping workflow export. Run this script inside the container."
-fi
-
-# --- 3. Credential export (still encrypted) -------------------------------------
-log "Exporting n8n credentials (remain encrypted with N8N_ENCRYPTION_KEY)..."
-mkdir -p "${BUNDLE_DIR}/credentials"
-if command -v n8n >/dev/null 2>&1; then
-    n8n export:credentials --all --output="${BUNDLE_DIR}/credentials/" --separate || \
-        log "WARNING: credential export reported an error (n8n may not be running)."
-else
-    log "WARNING: 'n8n' CLI not found in this shell; skipping credential export."
-fi
-
-# --- 4. Manifest -----------------------------------------------------------------
-cat > "${BUNDLE_DIR}/manifest.json" <<EOF
-{
-  "timestamp_utc": "${TIMESTAMP}",
-  "database_dump": "database.dump",
-  "workflows_dir": "workflows/",
-  "credentials_dir": "credentials/",
-  "note": "Credentials are encrypted with N8N_ENCRYPTION_KEY. Keep the key separately."
-}
-EOF
-
-# --- 5. Compress -------------------------------------------------------------------
-log "Compressing bundle..."
-tar -czf "${BACKUP_DIR}/n8n-backup-${TIMESTAMP}.tar.gz" -C "$BACKUP_DIR" "$TIMESTAMP"
-rm -rf "$BUNDLE_DIR"
-log "Backup archive created: ${BACKUP_DIR}/n8n-backup-${TIMESTAMP}.tar.gz"
-
-# --- 6. Retention / pruning ---------------------------------------------------------
-log "Pruning backups older than ${RETENTION_DAYS} days..."
-find "$BACKUP_DIR" -maxdepth 1 -name 'n8n-backup-*.tar.gz' -mtime "+${RETENTION_DAYS}" -print -delete || true
-
-log "Backup complete."