бэкапы

2026-08-03 00:24:06 +04:00
parent c25304919c
commit 9e36265f81
8 changed files with 335 additions and 0 deletions
@@ -0,0 +1,174 @@
+#!/usr/bin/env bash
+
+set -Eeuo pipefail
+
+SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
+ROOT_DIR="$(cd -- "${SCRIPT_DIR}/.." && pwd)"
+PROD_COMPOSE="${ROOT_DIR}/compose.prod.yaml"
+ENV_FILE="${MOONWELL_ENV_FILE:-${ROOT_DIR}/.env}"
+BACKUP_WORK_DIR="${ROOT_DIR}/storage/app/private/database-backups"
+LOCK_FILE="${BACKUP_WORK_DIR}/backup.lock"
+RUN_DIR=''
+
+log() {
+    printf '[%s] %s\n' "$(date '+%Y-%m-%d %H:%M:%S %Z')" "$*"
+}
+
+fail() {
+    log "ERROR: $*" >&2
+    exit 1
+}
+
+env_value() {
+    local key="$1"
+    local value
+
+    value="$(grep -E "^${key}=" "$ENV_FILE" | tail -n 1 | cut -d '=' -f 2-)"
+    if [[ "$value" == \"*\" && "$value" == *\" ]]; then
+        value="${value:1:${#value}-2}"
+    elif [[ "$value" == \'*\' && "$value" == *\' ]]; then
+        value="${value:1:${#value}-2}"
+    fi
+
+    printf '%s' "$value"
+}
+
+validate_database_name() {
+    [[ "$1" =~ ^[A-Za-z0-9_-]+$ ]] || fail "Недопустимое имя базы: $1"
+}
+
+prod() {
+    docker compose -f "$PROD_COMPOSE" "$@"
+}
+
+cleanup() {
+    if [[ -n "$RUN_DIR" && -d "$RUN_DIR" && "$RUN_DIR" == "${BACKUP_WORK_DIR}/"* ]]; then
+        find "$RUN_DIR" -maxdepth 1 -type f -delete
+        rmdir "$RUN_DIR" 2>/dev/null || true
+    fi
+}
+
+dump_web_database() {
+    local database="$1"
+    local output="$2"
+
+    log "Создаю дамп локальной базы ${database}"
+    prod exec -T mysql sh -c '
+        export MYSQL_PWD="$MYSQL_ROOT_PASSWORD"
+        exec mysqldump \
+            --user=root \
+            --single-transaction \
+            --quick \
+            --hex-blob \
+            --triggers \
+            --no-tablespaces \
+            --set-gtid-purged=OFF \
+            --databases "$1"
+    ' sh "$database" | gzip > "$output"
+}
+
+dump_remote_database() {
+    local database="$1"
+    local output="$2"
+    local host="$3"
+    local port="$4"
+    local username="$5"
+    local password="$6"
+
+    log "Создаю дамп AzerothCore ${database}"
+    docker run --rm --network host \
+        --env MYSQL_PWD="$password" \
+        mysql:8.4 \
+        mysqldump \
+            --host="$host" \
+            --port="$port" \
+            --user="$username" \
+            --single-transaction \
+            --quick \
+            --hex-blob \
+            --triggers \
+            --no-tablespaces \
+            --set-gtid-purged=OFF \
+            --databases "$database" | gzip > "$output"
+}
+
+upload_backup() {
+    local source="$1"
+    local destination="$2"
+    local app_uid app_gid
+
+    app_uid="$(env_value WWWUSER)"
+    app_gid="$(env_value WWWGROUP)"
+    app_uid="${app_uid:-1000}"
+    app_gid="${app_gid:-1000}"
+
+    chown "${app_uid}:${app_gid}" "$RUN_DIR" "$source"
+    chmod 0750 "$RUN_DIR"
+    chmod 0640 "$source"
+    prod exec -T --user "${app_uid}:${app_gid}" app \
+        php artisan backup:upload "/var/www/html/storage/app/private/database-backups/${RUN_DIR##*/}/${source##*/}" "$destination"
+}
+
+main() {
+    command -v docker >/dev/null 2>&1 || fail 'Не найден Docker'
+    command -v gzip >/dev/null 2>&1 || fail 'Не найден gzip'
+    command -v flock >/dev/null 2>&1 || fail 'Не найден flock'
+    docker compose version >/dev/null 2>&1 || fail 'Не найден Docker Compose Plugin'
+    [[ -f "$ENV_FILE" ]] || fail "Не найден ${ENV_FILE}"
+    [[ -f "$PROD_COMPOSE" ]] || fail "Не найден ${PROD_COMPOSE}"
+
+    mkdir -p "$BACKUP_WORK_DIR"
+    exec 9>"$LOCK_FILE"
+    if ! flock -n 9; then
+        log 'Предыдущий запуск ещё выполняется, новый запуск пропущен'
+        return 0
+    fi
+
+    local timestamp object_prefix web_database
+    local acore_host acore_port acore_username acore_password acore_databases
+    local database filename
+    local -a databases=() files=()
+
+    timestamp="$(date -u '+%Y-%m-%dT%H-%M-%SZ')"
+    object_prefix="$(env_value DATABASE_BACKUP_PREFIX)"
+    object_prefix="${object_prefix:-backups/databases}"
+    object_prefix="${object_prefix%/}/$(date -u '+%Y/%m/%d')/${timestamp}"
+    web_database="$(env_value DB_DATABASE)"
+    acore_host="$(env_value AZEROTHCORE_AUTH_DB_HOST)"
+    acore_port="$(env_value AZEROTHCORE_AUTH_DB_PORT)"
+    acore_username="$(env_value AZEROTHCORE_AUTH_DB_USERNAME)"
+    acore_password="$(env_value AZEROTHCORE_AUTH_DB_PASSWORD)"
+    acore_databases="$(env_value DATABASE_BACKUP_ACORE_DATABASES)"
+    acore_databases="${acore_databases:-acore_auth acore_characters acore_world acore_playerbots store}"
+
+    [[ -n "$web_database" ]] || fail 'DB_DATABASE не задан'
+    [[ -n "$acore_host" && -n "$acore_port" && -n "$acore_username" ]] || fail 'Не настроено подключение к AzerothCore'
+    validate_database_name "$web_database"
+
+    RUN_DIR="${BACKUP_WORK_DIR}/${timestamp}"
+    mkdir -m 0700 "$RUN_DIR"
+    trap cleanup EXIT
+
+    filename="${web_database}.sql.gz"
+    dump_web_database "$web_database" "${RUN_DIR}/${filename}"
+    databases+=("$web_database")
+    files+=("$filename")
+
+    for database in $acore_databases; do
+        validate_database_name "$database"
+        filename="${database}.sql.gz"
+        dump_remote_database "$database" "${RUN_DIR}/${filename}" "$acore_host" "$acore_port" "$acore_username" "$acore_password"
+        databases+=("$database")
+        files+=("$filename")
+    done
+
+    log "Все дампы созданы, загружаю набор ${timestamp} в S3"
+    for filename in "${files[@]}"; do
+        [[ -s "${RUN_DIR}/${filename}" ]] || fail "Пустой файл дампа: ${filename}"
+        upload_backup "${RUN_DIR}/${filename}" "${object_prefix}/${filename}"
+    done
+
+    log "Бэкап завершён: ${#databases[@]} баз, s3://${object_prefix}/"
+}
+
+main "$@"
@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+set -Eeuo pipefail
+
+SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
+ROOT_DIR="$(cd -- "${SCRIPT_DIR}/.." && pwd)"
+
+if [[ "$(id -u)" -ne 0 ]]; then
+    printf 'Запусти установку cron от root.\n' >&2
+    exit 1
+fi
+
+if [[ "$ROOT_DIR" != '/root/moonwell-web' ]]; then
+    printf 'Production-репозиторий должен находиться в /root/moonwell-web, сейчас: %s\n' "$ROOT_DIR" >&2
+    exit 1
+fi
+
+install -m 0644 "${ROOT_DIR}/ops/cron/moonwell-database-backup" /etc/cron.d/moonwell-database-backup
+install -m 0644 "${ROOT_DIR}/ops/logrotate/moonwell-database-backup" /etc/logrotate.d/moonwell-database-backup
+chmod 0755 "${ROOT_DIR}/scripts/backup-databases.sh"
+
+printf 'Cron установлен: ежедневно в 00:15, 08:15 и 16:15 по времени сервера.\n'