python backup script

Dockerfile

@@ -133,6 +133,7 @@ RUN if [ "$USE_OLLAMA" = "true" ]; then \
 # install python dependencies
 COPY --chown=$UID:$GID ./backend/requirements.txt ./requirements.txt
 
+RUN pip3 install huggingface_hub
 RUN pip3 install uv && \
     if [ "$USE_CUDA" = "true" ]; then \
     # If you use CUDA the whisper and embedding model will be downloaded on first use

backend/requirements.txt

@@ -106,3 +106,4 @@ googleapis-common-protos==1.63.2
 ldap3==2.9.1
 
 gnupg
+huggingface_hub

backend/scripts/backup.py

@@ -0,0 +1,44 @@
+#!/usr/bin/env python3
+import os
+import subprocess
+from huggingface_hub import HfApi
+
+def backup_db():
+    passphrase = os.environ.get("BACKUP_PASSPHRASE")
+    hf_token = os.environ.get("HF_TOKEN")
+    space_id = os.environ.get("SPACE_ID")
+
+    if not passphrase:
+        raise ValueError("BACKUP_PASSPHRASE is not set.")
+    if not hf_token:
+        raise ValueError("HF_TOKEN is not set.")
+    if not space_id:
+        raise ValueError("SPACE_ID is not set (or define repo_id manually).")
+
+    # Encrypt using GPG
+    print("Encrypting database with GPG...")
+    encrypt_cmd = [
+        "gpg", "--batch", "--yes", "--passphrase", passphrase,
+        "-c", "--cipher-algo", "AES256",
+        "-o", "db_backup/webui.db.gpg",
+        "data/webui.db"
+    ]
+    subprocess.run(encrypt_cmd, check=True)
+    print("Database encrypted successfully to db_backup/webui.db.gpg")
+
+    # Upload using huggingface_hub
+    print("Uploading to Hugging Face Spaces via huggingface_hub...")
+    api = HfApi()
+    repo_id = space_id
+    api.upload_file(
+        path_or_fileobj="db_backup/webui.db.gpg",
+        path_in_repo="db_backup/webui.db.gpg",
+        repo_id=repo_id,
+        repo_type="space",
+        token=hf_token,
+        commit_message="Update encrypted database backup"
+    )
+    print("DB backup uploaded successfully!")
+
+if __name__ == "__main__":
+    backup_db()

backend/start.sh

@@ -73,8 +73,7 @@ WEBUI_PID=$!
     echo "==============================================="
     echo "Daily backup job: encrypting and pushing the DB"
     echo "==============================================="
-    # Calls your db_crypt.sh function
-    bash "$SCRIPT_DIR/db_crypt.sh" encrypt_database
+    python "$SCRIPT_DIR/backup.py"
     # Sleep for 24 hours
     sleep 86400
   done