#!/bin/bash
set -euo pipefail
umask 077
dest=/data/backups/redis
install -d -o root -g root -m 0700 "$dest"
[ "$(realpath "$dest")" = "/data/backups/redis" ] || exit 2
exec 9>/run/lock/lisglosips-redis-backup.lock
flock -n 9 || { echo "Redis backup already running" >&2; exit 3; }
set -a
. /etc/lisglosips/secrets/redis-backup.env
set +a
export REDISCLI_AUTH="$REDIS_PASSWORD"
stamp=$(date -u +%Y%m%dT%H%M%SZ)
tmp=$(mktemp -d "$dest/.tmp-$stamp.XXXXXX")
trap 'rm -rf "$tmp"' EXIT
redis_cmd=(redis-cli -h "$REDIS_HOST" -p "$REDIS_PORT" --user "$REDIS_USER" --no-auth-warning)
"${redis_cmd[@]}" PING | grep -qx PONG
"${redis_cmd[@]}" BGSAVE >/dev/null
for _ in $(seq 1 60); do
  info=$("${redis_cmd[@]}" INFO persistence | tr -d '\r')
  in_progress=$(printf '%s\n' "$info" | awk -F: '/^rdb_bgsave_in_progress:/{print $2}')
  status=$(printf '%s\n' "$info" | awk -F: '/^rdb_last_bgsave_status:/{print $2}')
  [ "$in_progress" = "0" ] && [ "$status" = "ok" ] && break
  sleep 1
done
[ "$in_progress" = "0" ] && [ "$status" = "ok" ]
install -o root -g root -m 0600 /var/lib/redis/dump.rdb "$tmp/dump.rdb"
redis-check-rdb "$tmp/dump.rdb" > "$tmp/redis-check-rdb.txt"
"${redis_cmd[@]}" INFO server | tr -d '\r' | grep -E '^(redis_version|os|arch_bits|process_id|tcp_port)' > "$tmp/metadata.txt"
(cd "$tmp" && sha256sum dump.rdb metadata.txt > SHA256SUMS)
chmod 0600 "$tmp"/*
final="$dest/$stamp"
mv "$tmp" "$final"
trap - EXIT
find "$dest" -mindepth 1 -maxdepth 1 -type d -name '20*T*Z' -mtime +14 -exec rm -rf -- {} +
echo "$final"