nextcloudpi/bin/ncp/BACKUPS/nc-restore.sh

#!/bin/bash

#!/bin/bash
# Nextcloud restore backup
#
# Copyleft 2017 by Ignacio Nunez Hernanz <nacho _a_t_ ownyourbits _d_o_t_ com>
# GPL licensed (see end of file) * Use at your own risk!
#
# More at https://ownyourbits.com/2017/02/13/nextcloud-ready-raspberry-pi-image/
#

install()
{
  cat > /usr/local/bin/ncp-restore <<'EOF'
#!/bin/bash
set -eE

BACKUPFILE="$1"

DBADMIN=ncadmin
DBPASSWD="$( grep password /root/.my.cnf | sed 's|password=||' )"

source /usr/local/etc/library.sh # sets PHPVER

DIR="$( cd "$( dirname "$BACKUPFILE" )" &>/dev/null && pwd )" #abspath

[[ -f /.docker-image ]] && NCDIR=/data/nextcloud || NCDIR=/var/www/nextcloud

[[ $# -eq 0           ]] && { echo "missing first argument"         ; exit 1; }
[[ -f "$BACKUPFILE"   ]] || { echo "$BACKUPFILE not found"          ; exit 1; }
[[ "$DIR" =~ "$NCDIR" ]] && { echo "Refusing to restore from $NCDIR"; exit 1; }

TMPDIR="$( mktemp -d "$( dirname "$BACKUPFILE" )"/ncp-restore.XXXXXX )" || { echo "Failed to create temp dir" >&2; exit 1; }
grep -q -e ext -e btrfs -e zfs <( stat -fc%T "$TMPDIR" ) || { echo "Can only restore from ext/btrfs/zfs filesystems"     >&2; exit 1; }

TMPDIR="$( cd "$TMPDIR" &>/dev/null && pwd )" || { echo "$TMPDIR not found"; exit 1; } #abspath
cleanup(){  local RET=$?; echo "Cleanup..."; rm -rf "${TMPDIR}"; trap "" EXIT; exit $RET; }
trap cleanup INT TERM HUP ERR EXIT
rm -rf "$TMPDIR" && mkdir -p "$TMPDIR"

[[ "$BACKUPFILE" =~ ".tar.gz" ]] && compress_arg="-I pigz"

# CHECK FREE SPACE IN $TMPDIR
echo "check free space..." # allow at least ~100 extra MiB
extractedsize=$(tar $compress_arg -tvf "$BACKUPFILE" | awk '{s+=$3} END{printf "%.0f", (s/1024)}') # Size of extracted files in "KB"
size=$(($extractedsize + 100*1024))
free=$( df "$TMPDIR" | tail -1 | awk '{ print $4 }' )
[ $size -ge $free ] && {
  echo "free space check failed. Need $size KB in $TMPDIR";
  exit 1;
}

# EXTRACT FILES
echo "extracting backup file $BACKUPFILE..."
tar $compress_arg -xf "$BACKUPFILE" -C "$TMPDIR" || exit 1

## SANITY CHECKS
[[ -d "$TMPDIR"/nextcloud ]] && [[ -f "$( ls "$TMPDIR"/nextcloud-sqlbkp_*.bak 2>/dev/null )" ]] || {
  echo "invalid backup file. Abort"
  exit 1
}

## RESTORE FILES

echo "restore files..."
rm -rf "$NCDIR"
mv -T "$TMPDIR"/nextcloud "$NCDIR" || { echo "Error restoring base files"; exit 1; }

# update NC database password to this instance
sed -i "s|'dbpassword' =>.*|'dbpassword' => '$DBPASSWD',|" /var/www/nextcloud/config/config.php

# update redis credentials
REDISPASS="$( grep "^requirepass" /etc/redis/redis.conf | cut -f2 -d' ' )"
[[ "$REDISPASS" != "" ]] && \
  sed -i "s|'password'.*|'password' => '$REDISPASS',|" /var/www/nextcloud/config/config.php
service redis-server restart

## RE-CREATE DATABASE TABLE

echo "restore database..."
mysql -u root <<EOFMYSQL
DROP DATABASE IF EXISTS nextcloud;
CREATE DATABASE nextcloud;
GRANT USAGE ON *.* TO '$DBADMIN'@'localhost' IDENTIFIED BY '$DBPASSWD';
DROP USER '$DBADMIN'@'localhost';
CREATE USER '$DBADMIN'@'localhost' IDENTIFIED BY '$DBPASSWD';
GRANT ALL PRIVILEGES ON nextcloud.* TO $DBADMIN@localhost;
EXIT
EOFMYSQL
[ $? -ne 0 ] && { echo "Error configuring nextcloud database"; exit 1; }

mysql -u root nextcloud <  "$TMPDIR"/nextcloud-sqlbkp_*.bak || { echo "Error restoring nextcloud database"; exit 1; }

## RESTORE DATADIR

if is_docker; then
  DATADIR=/data/nextcloud/data
else
  DATADIR="$(get_nc_config_value datadirectory)"
fi
[[ "$DATADIR" == "" ]] && { echo "Error reading data directory"; exit 1; }

cd "$NCDIR"

### INCLUDEDATA=yes situation

NUMFILES=2
if [[ $( ls "$TMPDIR" | wc -l ) -eq $NUMFILES ]]; then

  [[ -e "$DATADIR" ]] && {
    echo "backing up existing $DATADIR to $DATADIR-$( date "+%m-%d-%y" )..."
    mv "$DATADIR" "$DATADIR-$( date "+%m-%d-%y" )" || exit 1
  }

  echo "restore datadir to $DATADIR..."

  mkdir -p "$DATADIR"
  grep -q "btrfs" <(stat -fc%T "$DATADIR") && which btrfs &>/dev/null && {
    rmdir "$DATADIR"                  || exit 1
    btrfs subvolume create "$DATADIR" || exit 1
  }
  chown www-data: "$DATADIR"
  TMPDATA="$TMPDIR/$( basename "$DATADIR" )"
  mv "$TMPDATA"/* "$TMPDATA"/.[!.]* "$DATADIR" || exit 1
  rmdir "$TMPDATA"                             || exit 1

  ncc maintenance:mode --off

### INCLUDEDATA=no situation

else
  echo "No datadir found in backup"

  [[ -e "$DATADIR" ]] || {
    echo "${DATADIR} not found. Resetting to ${NCDIR}/data"
    DATADIR="$NCDIR"/data
    mkdir -p "${DATADIR}"
    touch "${DATADIR}"/.ocdata
    chown -R www-data: "${DATADIR}"
  }

  ncc maintenance:mode --off
  ncc files:scan --all

  # cache needs to be cleaned as of NC 12
  NEED_RESTART=1
fi

sed -i "s|'datadirectory' =>.*|'datadirectory' => '${DATADIR}',|" "${NCDIR}"/config/config.php

# Just in case we moved the opcache dir
install_template "php/opcache.ini.sh" "/etc/php/${PHPVER}/mods-available/opcache.ini"

# tmp upload dir
mkdir -p "$DATADIR/tmp"
chown www-data: "$DATADIR/tmp"
ncc config:system:set tempdirectory --value "$DATADIR/tmp"
sed -i "s|^;\?upload_tmp_dir =.*$|upload_tmp_dir = $DATADIR/tmp|" /etc/php/${PHPVER}/cli/php.ini
sed -i "s|^;\?upload_tmp_dir =.*$|upload_tmp_dir = $DATADIR/tmp|" /etc/php/${PHPVER}/fpm/php.ini
sed -i "s|^;\?sys_temp_dir =.*$|sys_temp_dir = $DATADIR/tmp|"     /etc/php/${PHPVER}/fpm/php.ini

# logs
ncc config:system:set logfile --value="$DATADIR/nextcloud.log"

# update fail2ban logpath
[[ -f /etc/fail2ban/jail.conf ]] && {
  sed -i "s|logpath  =.*|logpath  = $DATADIR/nextcloud.log|" /etc/fail2ban/jail.conf
  pgrep fail2ban &>/dev/null && service fail2ban restart
}

# refresh nextcloud trusted domains
bash /usr/local/bin/nextcloud-domain.sh

# update the systems data-fingerprint
ncc maintenance:data-fingerprint

# refresh thumbnails
ncc files:scan-app-data

# restart PHP if needed
[[ "$NEED_RESTART" == "1" ]] && \
  bash -c " sleep 3; service php${PHPVER}-fpm restart" &>/dev/null &
EOF
  chmod +x /usr/local/bin/ncp-restore
}

configure()
{
  ncp-restore "$BACKUPFILE"
}

# License
#
# This script is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This script is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this script; if not, write to the
# Free Software Foundation, Inc., 59 Temple Place, Suite 330,
# Boston, MA  02111-1307  USA