p4u1/backup-bot-two
0
0
Fork 0
forked from coop-cloud/backup-bot-two
Code Pull Requests Activity

restic_repo as secret option #31

Browse Source
This commit is contained in:
Moritz
2023-10-03 22:39:06 +02:00
parent ab6c06d423
commit c3f3d1a6fe
4 changed files with 47 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
backupbot.py
View File

@ -26,17 +26,21 @@ def cli(loglevel, service, repository):
global SERVICE
if service:
SERVICE = service.replace('.', '_')
if repository:
os.environ['RESTIC_REPO'] = repository
if loglevel:
numeric_level = getattr(logging, loglevel.upper(), None)
if not isinstance(numeric_level, int):
raise ValueError('Invalid log level: %s' % loglevel)
logging.basicConfig(level=numeric_level)
export_secrets()
init_repo(repository)
init_repo()
def init_repo(repository):
restic.repository = repository
def init_repo():
repo = os.environ['RESTIC_REPO']
logging.debug(f"set restic repository location: {repo}")
restic.repository = repo
restic.password_file = '/var/run/secrets/restic_password'
try:
restic.cat.config()
@ -50,10 +54,12 @@ def init_repo(repository):
def export_secrets():
for env in os.environ:
if env.endswith('PASSWORD_FILE') or env.endswith('KEY_FILE'):
if env.endswith('FILE') and not "COMPOSE_FILE" in env:
logging.debug(f"exported secret: {env}")
with open(os.environ[env]) as file:
os.environ[env.removesuffix('_FILE')] = file.read()
secret = file.read()
os.environ[env.removesuffix('_FILE')] = secret
# logging.debug(f"Read secret value: {secret}")
@cli.command()