#!/bin/bash
# Gitea Hardening Prep: Automated Backup Script
# Usage: sudo ./backup_gitea.sh

BACKUP_DIR="/opt/gitea/backups"
TIMESTAMP=$(date +"%Y%m%d_%H%M%S")
GITEA_CONF="/etc/gitea/app.ini" # Update this to your path
GITEA_WORK_DIR="/var/lib/gitea" # Update this to your path

mkdir -p $BACKUP_DIR

echo "--- Starting Gitea Backup ($TIMESTAMP) ---"

# 1. Generate Gitea Dump (Includes DB, Repos, and Custom files)
# Run as the 'git' user or whichever user runs the gitea binary
cd $BACKUP_DIR
gitea dump -c $GITEA_CONF

# 2. Secure the backup file
chmod 600 $BACKUP_DIR/*.zip

echo "--- Backup Complete: $(ls -t $BACKUP_DIR | head -1) ---"
echo "Next Step: Move this ZIP to off-site storage before applying hardening."