add backup scripts and systemd units

local-backup

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+set -o errexit -o nounset -o pipefail
+
+remote=root@matrix.grapheneos.org
+
+timestamp=$(date -u +%Y-%m-%dT%H:%m:%SZ)
+ssh $remote "rm -rf local-backup"
+ssh $remote "mkdir local-backup"
+
+ssh $remote "mkdir local-backup/$timestamp"
+ssh $remote "pg_dumpall -U postgres > local-backup/$timestamp/all_databases.sql"
+ssh $remote "cp -a /etc/synapse local-backup/$timestamp/synapse"
+ssh $remote "tar c -C local-backup $timestamp | zstd -9 | age -r \$(cat backup-public-key.txt) -o local-backup/$timestamp.tar.zst.age"
+rsync -v $remote:./local-backup/$timestamp.tar.zst.age backup/

remote-backup

@@ -0,0 +1,13 @@
+#!/bin/bash
+
+set -o errexit -o nounset -o pipefail
+
+timestamp=$(date -u +%Y-%m-%dT%H:%m:%SZ)
+rm -rf remote-backup
+mkdir remote-backup
+
+mkdir remote-backup/$timestamp
+pg_dumpall -U postgres > remote-backup/$timestamp/all_databases.sql
+cp -a /etc/synapse remote-backup/$timestamp/synapse
+tar c remote-backup/$timestamp | zstd -9 | age -r $(cat backup-public-key.txt) -o remote-backup/$timestamp.tar.zst.age
+sshpass -f cloud-archive-password.txt rsync -v ./remote-backup/$timestamp.tar.zst.age pca@gateways.storage.gra.cloud.ovh.net:backup/

remote-backup.service

@@ -0,0 +1,8 @@
+[Unit]
+Description=Perform remote backup
+
+[Service]
+ExecStart=/usr/local/bin/remote-backup
+Type=oneshot
+User=root
+WorkingDirectory=/root

remote-backup.timer

@@ -0,0 +1,8 @@
+[Unit]
+Description=Perform remote backup backups daily
+
+[Timer]
+OnCalendar=daily
+
+[Install]
+WantedBy=timers.target