From 511733d2e11566bd85dec9728403baff3ad2e62b Mon Sep 17 00:00:00 2001
From: benj <benj@rse8.com>
Date: Wed, 1 Apr 2026 22:14:57 +0800
Subject: cloud backup config for ad3

---
 backup/ad3/backup-cloud | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100755 backup/ad3/backup-cloud

(limited to 'backup/ad3/backup-cloud')

diff --git a/backup/ad3/backup-cloud b/backup/ad3/backup-cloud
new file mode 100755
index 0000000..82b5a1b
--- /dev/null
+++ b/backup/ad3/backup-cloud
@@ -0,0 +1,30 @@
+set -euo pipefail
+
+if [ "$(id -u)" -ne 0 ]; then
+    echo "Run with sudo"
+    exit 1
+fi
+
+source /root/.restic-env
+
+# Backup LUKS header into a location restic will pick up
+cryptsetup luksHeaderBackup /dev/nvme0n1p2 \
+    --header-backup-file /root/luks-header-backup.tmp
+mv /root/luks-header-backup.tmp /root/luks-header-backup
+
+# Run backup (/ and /boot since /boot is a separate partition)
+restic backup / /boot \
+    --exclude-file=/home/benj/.mycfg/backup/ad3/restic-exclude.txt \
+    --exclude-caches \
+    --verbose
+
+# Retention: 4 weekly, 6 monthly, 1 yearly
+restic forget \
+    --keep-weekly 4 \
+    --keep-monthly 6 \
+    --keep-yearly 1 \
+    --prune
+
+echo ""
+echo "=== Latest snapshots ==="
+restic snapshots --latest 5
\ No newline at end of file
-- 
cgit v1.2.3