freedombone/src/freedombone-backup-local

#!/bin/bash
#
# .---.                  .              .
# |                      |              |
# |--- .--. .-.  .-.  .-.|  .-. .--.--. |.-.  .-. .--.  .-.
# |    |   (.-' (.-' (   | (   )|  |  | |   )(   )|  | (.-'
# '    '     --'  --'  -' -  -' '  '   -' -'   -' '   -  --'
#
#                    Freedom in the Cloud
#
# Backup to local storage - typically a USB drive

# License
# =======
#
# Copyright (C) 2015 Bob Mottram <bob@robotics.uk.to>
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.

PROJECT_NAME='freedombone'
COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt

export TEXTDOMAIN=${PROJECT_NAME}-backup-local
export TEXTDOMAINDIR="/usr/share/locale"

USB_DRIVE=/dev/sdb1
USB_MOUNT=/mnt/usb

ADMIN_USERNAME=
ADMIN_NAME=

DATABASE_PASSWORD=''
if [ -f /root/dbpass ]; then
    DATABASE_PASSWORD=$(cat /root/dbpass)
fi

function mount_drive {
    if [ $1 ]; then
        USB_DRIVE=/dev/${1}1
    fi

    # get the admin user
    ADMIN_USERNAME=$(cat $COMPLETION_FILE | grep "Admin user" | awk -F ':' '{print $2}')
    if [ $2 ]; then
        ADMIN_USERNAME=$2
    fi
    ADMIN_NAME=$(getent passwd $ADMIN_USERNAME | cut -d: -f5 | cut -d, -f1)

    # check that the backup destination is available
    if [ ! -b $USB_DRIVE ]; then
        echo $"Please attach a USB drive"
        exit 1
    fi

    # unmount if already mounted
    umount -f $USB_MOUNT
    if [ ! -d $USB_MOUNT ]; then
        mkdir $USB_MOUNT
    fi
    if [ -f /dev/mapper/encrypted_usb ]; then
        rm -rf /dev/mapper/encrypted_usb
    fi
    cryptsetup luksClose encrypted_usb

    # mount the encrypted backup drive
    cryptsetup luksOpen $USB_DRIVE encrypted_usb
    if [ "$?" = "0" ]; then
        USB_DRIVE=/dev/mapper/encrypted_usb
    fi
    mount $USB_DRIVE $USB_MOUNT
    if [ ! "$?" = "0" ]; then
        echo $"There was a problem mounting the USB drive to $USB_MOUNT"
        rm -rf $USB_MOUNT
        exit 2
    fi
}

function unmount_drive {
    sync
    umount $USB_MOUNT
    if [ ! "$?" = "0" ]; then
        echo $"Unable to unmount the drive. This means that the backup did not work"
        rm -rf $USB_MOUNT
        exit 9
    fi
    rm -rf $USB_MOUNT
    if [[ $USB_DRIVE == /dev/mapper/encrypted_usb ]]; then
        echo $"Unmount encrypted USB"
        cryptsetup luksClose encrypted_usb
    fi
    if [ -f /dev/mapper/encrypted_usb ]; then
        rm -rf /dev/mapper/encrypted_usb
    fi
    echo $"Backup to USB drive is complete. You can now unplug it."
}

function backup_database {
    if [ ${#DATABASE_PASSWORD} -lt 2 ]; then
        echo $"No MariaDB password was given"
        exit 10
    fi
    if [ ! -d $USB_MOUNT/backup/${1} ]; then
        mkdir -p $USB_MOUNT/backup/${1}
    fi
    if [ ! -d $USB_MOUNT/backup/${1}data ]; then
        mkdir -p $USB_MOUNT/backup/${1}data
    fi
    if [ ! -d /root/temp${1}data ]; then
        mkdir -p /root/temp${1}data
    fi
    echo $"Obtaining ${1} database backup"
    mysqldump --password="$DATABASE_PASSWORD" ${1} > /root/temp${1}data/${1}.sql
    if [ ! -s /root/temp${1}data/${1}.sql ]; then
        echo $"${1} database could not be saved"
        shred -zu /root/temp${1}data/*
        rm -rf /root/temp${1}data
        umount $USB_MOUNT
        rm -rf $USB_MOUNT
        exit 5
    fi
}

function backup_directory_to_usb {
    if [ ! -d ${1} ]; then
        echo $"WARNING: directory does not exist: ${1}"
    else
        BACKUP_KEY_EXISTS=$(gpg --list-keys "$ADMIN_NAME (backup key)")
        if [ ! "$?" = "0" ]; then
            echo $"Backup key could not be found"
            exit 6
        fi
        MY_BACKUP_KEY_ID=$(gpg --list-keys "$ADMIN_NAME (backup key)" | grep 'pub ' | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
        if [ ! -d $USB_MOUNT/backup/${2} ]; then
            mkdir -p $USB_MOUNT/backup/${2}
        fi
        obnam force-lock -r $USB_MOUNT/backup/${2} --encrypt-with $MY_BACKUP_KEY_ID ${1}
        obnam backup -r $USB_MOUNT/backup/${2} --encrypt-with $MY_BACKUP_KEY_ID ${1}
        obnam forget --keep=30d -r $USB_MOUNT/backup/${2} --encrypt-with $MY_BACKUP_KEY_ID
        if [ ! "$?" = "0" ]; then
            umount $USB_MOUNT
            rm -rf $USB_MOUNT
            if [[ ${1} == "/root/temp"* || ${1} == *"tempbackup" ]]; then
                shred -zu ${1}/*
                rm -rf ${1}
            fi
            exit 7
        fi
        if [[ ${1} == "/root/temp"* || ${1} == *"tempbackup" ]]; then
            shred -zu ${1}/*
            rm -rf ${1}
        fi
    fi
}

function make_backup_directory {
    # make a backup directory on the drive
    if [ ! -d $USB_MOUNT/backup ]; then
        mkdir $USB_MOUNT/backup
    fi
    if [ ! -d $USB_MOUNT/backup ]; then
        echo $"There was a problem making the directory $USB_MOUNT/backup."
        umount $USB_MOUNT
        rm -rf $USB_MOUNT
        exit 3
    fi
}

function check_storage_space_remaining {
    # Check space remaining on the usb drive
    used_percent=$(df -k $USB_MOUNT | tail -n 1 | awk -F ' ' '{print $5}' | awk -F '%' '{print $1}')
    if [ $used_percent -gt 95 ]; then
        echo $"Less than 5% of space remaining on backup drive"
        umount $USB_MOUNT
        rm -rf $USB_MOUNT
        exit 4
    fi
}

function backup_users {
    # Backup user files
    for d in /home/*/ ; do
        USERNAME=$(echo "$d" | awk -F '/' '{print $3}')
        if [[ $USERNAME != "git" ]]; then

            # Backup any gpg keys
            if [ -d /home/$USERNAME/.gnupg ]; then
                echo $"Backing up gpg keys for $USERNAME"
                backup_directory_to_usb /home/$USERNAME/.gnupg gnupg/$USERNAME
            fi

            # Backup any personal settings
            if [ -d /home/$USERNAME/personal ]; then
                echo $"Backing up personal settings for $USERNAME"
                backup_directory_to_usb /home/$USERNAME/personal personal/$USERNAME
            fi

            # Backup ssh keys
            if [ -d /home/$USERNAME/.ssh ]; then
                echo $"Backing up ssh keys for $USERNAME"
                backup_directory_to_usb /home/$USERNAME/.ssh ssh/$USERNAME
            fi

            # Backup user configs
            if [ -d /home/$USERNAME/.config ]; then
                echo $"Backing up config files for $USERNAME"
                backup_directory_to_usb /home/$USERNAME/.config config/$USERNAME
            fi

            # Backup mutt
            if [ -f /home/$USERNAME/.muttrc ]; then
                echo $"Backing up Mutt settings for $USERNAME"
                if [ ! -d /home/$USERNAME/tempbackup ]; then
                    mkdir -p /home/$USERNAME/tempbackup
                fi
                cp /home/$USERNAME/.muttrc /home/$USERNAME/tempbackup
                if [ -f /etc/Muttrc ]; then
                    cp /etc/Muttrc /home/$USERNAME/tempbackup
                fi
                backup_directory_to_usb /home/$USERNAME/tempbackup mutt/$USERNAME
            fi

            # Backup email
            if [ -d /home/$USERNAME/Maildir ]; then
                echo $"Creating an email archive for $USERNAME"
                if [ ! -d /root/tempbackupemail/$USERNAME ]; then
                    mkdir -p /root/tempbackupemail/$USERNAME
                fi
                tar -czvf /root/tempbackupemail/$USERNAME/maildir.tar.gz /home/$USERNAME/Maildir
                echo $"Backing up emails for $USERNAME"
                backup_directory_to_usb /root/tempbackupemail/$USERNAME mail/$USERNAME
            fi

            # Backup spamassassin
            if [ -d /home/$USERNAME/.spamassassin ]; then
                echo $"Backing up spamassassin settings for $USERNAME"
                backup_directory_to_usb /home/$USERNAME/.spamassassin spamassassin/$USERNAME
            fi

            # Backup procmail
            if [ -f /home/$USERNAME/.procmailrc ]; then
                echo $"Backing up procmail settings for $USERNAME"
                if [ ! -d /home/$USERNAME/tempbackup ]; then
                    mkdir -p /home/$USERNAME/tempbackup
                fi
                cp /home/$USERNAME/.procmailrc /home/$USERNAME/tempbackup
                backup_directory_to_usb /home/$USERNAME/tempbackup procmail/$USERNAME
            fi
        fi
    done
}

function backup_directories {
    # directories to be backed up (source,dest)
    backup_dirs=(
        "/etc/letsencrypt,            letsencrypt"
        "/var/lib/dokuwiki,           wiki"
        "/etc/dokuwiki,               wiki2"
        "/etc/ssl,                    ssl"
        "/var/spool/mlmmj,            mailinglist"
        "/var/lib/prosody,            xmpp"
        "/etc/nginx/sites-available,  web"
        "/home/$ADMIN_USERNAME/.ipfs, ipfs"
        "/var/cache/minidlna,         dlna"
    )

    for dr in "${backup_dirs[@]}"
    do
        source_directory=$(echo $dr | awk -F ',' '{print $1}'  | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')
        if [ -d $source_directory ]; then
            dest_directory=$(echo $dr | awk -F ',' '{print $2}'  | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')
            echo $"Backing up $source_directory to $dest_directory"
            backup_directory_to_usb $source_directory $dest_directory
        fi
    done
}

mount_drive $1 $2
make_backup_directory
check_storage_space_remaining
backup_users
backup_directories

# backup gnusocial
if grep -q "GNU Social domain" $COMPLETION_FILE; then
    MICROBLOG_DOMAIN_NAME=$(cat $COMPLETION_FILE | grep "GNU Social domain" | awk -F ':' '{print $2}')
    if [ -d /var/www/${MICROBLOG_DOMAIN_NAME} ]; then
        backup_database gnusocial
        backup_directory_to_usb /root/tempgnusocialdata gnusocialdata
        echo $"Backing up GNU social installation"
        backup_directory_to_usb /var/www/${MICROBLOG_DOMAIN_NAME}/htdocs gnusocial
    else
        echo $"GNU Social domain specified but not found in /var/www/${MICROBLOG_DOMAIN_NAME}"
        exit 6327
    fi
fi

# backup hubzilla
if grep -q "Hubzilla domain" $COMPLETION_FILE; then
    HUBZILLA_DOMAIN_NAME=$(cat $COMPLETION_FILE | grep "Hubzilla domain" | awk -F ':' '{print $2}')
    if [ -d /var/www/${HUBZILLA_DOMAIN_NAME} ]; then
        backup_database hubzilla
        backup_directory_to_usb /root/temphubzilladata hubzilladata
        echo $"Backing up Hubzilla installation"
        backup_directory_to_usb /var/www/${HUBZILLA_DOMAIN_NAME}/htdocs hubzilla
    else
        echo $"Hubzilla domain specified but not found in /var/www/${HUBZILLA_DOMAIN_NAME}"
        exit 2578
    fi
fi

# backup owncloud
if [ -d /etc/owncloud ]; then
    if [ ! -d $USB_MOUNT/backup/owncloud2 ]; then
        mkdir -p $USB_MOUNT/backup/owncloud2
    fi
    backup_database owncloud
    backup_directory_to_usb /root/tempownclouddata ownclouddata
    echo $"Obtaining Owncloud data backup"
    backup_directory_to_usb /var/lib/owncloud owncloud
    backup_directory_to_usb /etc/owncloud owncloud2
fi

# backup gogs
if [ -d /home/git/go/src/github.com/gogits ]; then
    backup_database gogs
    backup_directory_to_usb /root/tempgogsdata gogsdata
    echo $"Obtaining Gogs settings backup"
    backup_directory_to_usb /home/git/go/src/github.com/gogits/gogs/custom gogs
    echo $"Obtaining Gogs repos backup"
    mv /home/git/gogs-repositories/*.git /home/git/gogs-repositories/$ADMIN_USERNAME
    backup_directory_to_usb /home/git/gogs-repositories gogsrepos
    echo $"Obtaining Gogs authorized_keys backup"
    backup_directory_to_usb /home/git/.ssh gogsssh
fi

# Backup blog
if grep -q "Blog domain" $COMPLETION_FILE; then
    FULLBLOG_DOMAIN_NAME=$(cat $COMPLETION_FILE | grep "Blog domain" | awk -F ':' '{print $2}')
    if [ -d /var/www/${FULLBLOG_DOMAIN_NAME} ]; then
        echo $"Obtaining blog backup"
        backup_directory_to_usb /var/www/${FULLBLOG_DOMAIN_NAME}/htdocs blog
    else
        echo $"Blog domain specified but not found in /var/www/${FULLBLOG_DOMAIN_NAME}"
        exit 2578
    fi
    fi
fi

# Backup admin user README file
if [ -f /home/$ADMIN_USERNAME/README ]; then
    echo $"Backing up README"
    if [ ! -d /home/$ADMIN_USERNAME/tempbackup ]; then
        mkdir -p /home/$ADMIN_USERNAME/tempbackup
    fi
    cp -f /home/$ADMIN_USERNAME/README /home/$ADMIN_USERNAME/tempbackup
    backup_directory_to_usb /home/$ADMIN_USERNAME/tempbackup readme
fi

# Backup VoIP settings
if [ -f /etc/mumble-server.ini ]; then
    echo $"Backing up VoIP settings"
    if [ ! -d /root/tempvoipbackup ]; then
        mkdir -p /root/tempvoipbackup
    fi
    cp -f /etc/mumble-server.ini /root/tempvoipbackup
    cp -f /var/lib/mumble-server/mumble-server.sqlite /root/tempvoipbackup
    cp -f /etc/sipwitch.conf /root/tempvoipbackup
    backup_directory_to_usb /root/tempvoipbackup voip
fi

# MariaDB settings
if [ ${#DATABASE_PASSWORD} -gt 1 ]; then
    if [ ! -d /root/tempmariadb ]; then
        mkdir /root/tempmariadb
    fi
    mysqldump --password="$DATABASE_PASSWORD" mysql user > /root/tempmariadb/mysql.sql
    if [ ! -s /root/tempmariadb/mysql.sql ]; then
        echo $"Unable to backup mysql settings"
        rm -rf /root/tempmariadb
        umount $USB_MOUNT
        rm -rf $USB_MOUNT
        exit 8
    fi
    echo "$DATABASE_PASSWORD" > /root/tempmariadb/db
    chmod 400 /root/tempmariadb/db
    backup_directory_to_usb /root/tempmariadb mariadb
fi

# Backup Tox node settings
if [ -d /var/lib/tox-bootstrapd ]; then
    echo $"Backing up Tox node settings"
    cp /etc/tox-bootstrapd.conf /var/lib/tox-bootstrapd
    if [ -d /var/lib/tox-bootstrapd/Maildir ]; then
        rm -rf /var/lib/tox-bootstrapd/Maildir
    fi
    backup_directory_to_usb /var/lib/tox-bootstrapd tox
fi

unmount_drive

exit 0