moving everything to active or retired vs incubating and graduated

active/systemd_borg/borg.md

@@ -0,0 +1,72 @@
+# Borg Backup
+
+## Server Setup
+
+<https://borgbackup.readthedocs.io/en/stable/deployment/central-backup-server.html#user-and-group>
+
+User: backup
+
+Group: backup
+
+Shell: /bin/bash (or other capable to run the borg serve command)
+
+Home: /home/backup
+
+```bash
+dnf install borgbackup
+
+useradd backup
+mkdir /home/backup/.ssh
+touch /home/backup/.ssh/authorized_keys
+chown -R backup:backup /home/backup/.ssh
+```
+
+### Adding a Client
+
+Note: See [adding nextcloud](#adding-nextcloud) for nextcloud instructions here.
+
+```bash
+export BACKUP_HOST=""
+
+ssh-keygen -C backup@${BACKUP_HOST} -f ~/.ssh/id_${BACKUP_HOST}
+
+cat <<EOF >> ~/.ssh/config
+Host ${BACKUP_HOST}
+    Hostname ${BACKUP_HOST}
+    IdentityFile ~/.ssh/id_${BACKUP_HOST}
+    User backup
+    Port 22
+    KeepAlive yes
+EOF
+```
+
+Now on the server:
+
+```bash
+export CLIENT_FQDN=""
+# Should look like ssh-rsa abcd1234 backup@fqdn.something.com
+export SSH_PUBKEY=""
+export AUTHKEY_ENTRY="command=\"cd /home/backup/repos/${CLIENT_FQDN}; borg serve --restrict-to-path /home/backup/repos/${CLIENT_FQDN}\",restrict ${SSH_PUBKEY}"
+echo $AUTHKEY_ENTRY >> /home/backup/.ssh/authorized_keys
+
+mkdir /home/backup/repos/${CLIENT_FQDN}
+chown backup:backup /home/backup/repos/${CLIENT_FQDN}
+```
+
+Then back on the client:
+
+```bash
+ssh borg.reeselink.com
+
+borg init --encryption none backup@${BACKUP_HOST}:root
+```
+
+#### Adding Nextcloud
+
+Rather than creating a client, just set the borg backup location to:
+
+```text
+backup@borg.reeselink.com:nextcloud
+```
+
+Then run the backup. It will generate a pubkey. Copy this into the authorized_keys file.

active/systemd_borg/borg.sh

@@ -0,0 +1,75 @@
+#!/bin/sh
+
+export BACKUP_HOST=driveripper.reeselink.com
+sshfs ${BACKUP_HOST}:backup /backup
+
+# Setting this, so the repo does not need to be given on the commandline:
+export BORG_REPO='/backup'
+
+# some helpers and error handling:
+info() { printf "\n%s %s\n\n" "$( date )" "$*" >&2; }
+trap 'echo $( date ) Backup interrupted >&2; exit 2' INT TERM
+
+info "Starting backup"
+
+# Backup the most important directories into an archive named after
+# the machine this script is currently running on:
+
+borg create                         \
+    --verbose                       \
+    --filter AME                    \
+    --list                          \
+    --stats                         \
+    --show-rc                       \
+    --compression none              \
+    --exclude-caches                \
+    --exclude 'home/*/.cache/*'     \
+    --exclude 'var/tmp/*'           \
+                                    \
+    ::'{hostname}-{now}'            \
+    /etc                            \
+    /home                           \
+    /root                           \
+    /var
+
+backup_exit=$?
+
+info "Pruning repository"
+
+# Use the `prune` subcommand to maintain 7 daily, 4 weekly and 6 monthly
+# archives of THIS machine. The '{hostname}-*' matching is very important to
+# limit prune's operation to this machine's archives and not apply to
+# other machines' archives also:
+
+borg prune                          \
+    --list                          \
+    --glob-archives '{hostname}-*'  \
+    --show-rc                       \
+    --keep-daily    7               \
+    --keep-weekly   2               \
+    --keep-monthly  1
+
+prune_exit=$?
+
+# actually free repo disk space by compacting segments
+
+info "Compacting repository"
+
+borg compact
+
+compact_exit=$?
+
+# use highest exit code as global exit code
+global_exit=$(( backup_exit > prune_exit ? backup_exit : prune_exit ))
+global_exit=$(( compact_exit > global_exit ? compact_exit : global_exit ))
+
+if [ ${global_exit} -eq 0 ]; then
+    info "Backup, Prune, and Compact finished successfully"
+elif [ ${global_exit} -eq 1 ]; then
+    info "Backup, Prune, and/or Compact finished with warnings"
+else
+    info "Backup, Prune, and/or Compact finished with errors"
+fi
+
+fusermount -u /backup
+exit ${global_exit}