From d6c9915e32bd516a0ca23c2cb846e26472bf3019 Mon Sep 17 00:00:00 2001
From: DecaTec <jr@decatec.de>
Date: Sun, 10 Sep 2017 14:01:28 +0200
Subject: [PATCH] Added scripts for backup/restore

---
 NextcloudBackup.sh  | 110 ++++++++++++++++++++++++++++
 NextcloudRestore.sh | 173 ++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 283 insertions(+)
 create mode 100644 NextcloudBackup.sh
 create mode 100644 NextcloudRestore.sh

diff --git a/NextcloudBackup.sh b/NextcloudBackup.sh
new file mode 100644
index 0000000..69c760a
--- /dev/null
+++ b/NextcloudBackup.sh
@@ -0,0 +1,110 @@
+#!/bin/bash
+
+#
+# Bash script for creating backups of Nextcloud.
+# Usage: ./NextcloudBackup.sh
+# 
+# The script is based on an installation of Nextcloud using nginx and MariaDB, see https://decatec.de/home-server/nextcloud-auf-ubuntu-server-mit-nginx-mariadb-php-lets-encrypt-redis-und-fail2ban/
+#
+
+#
+# IMPORTANT
+# You have to customize this script (directories, users, etc.) for your actual environment.
+# All entries which need to be customized are tagged with "TODO".
+#
+
+# Variables
+currentDate=$(date +"%Y%m%d_%H%M%S")
+# TODO: The directory where you store the Nextcloud backups
+backupMainDir="/mnt/Share/NextcloudBackups/"
+# The actual directory of the current backup - this is is subdirectory of the main directory above with a timestamp
+backupdir="${backupMainDir}/${currentDate}/"
+# TODO: The directory of your Nextcloud installation (this is a directory under your web root)
+nextcloudFileDir="/var/www/nextcloud"
+# TODO: The directory of your Nextcloud data directory (outside the Nextcloud file directory)
+nextcloudDataDir="/var/nextcloud_data"
+# TODO: Your Nextcloud database name
+nextcloudDatabase="nextcloud_db"
+# TODO: Your Nextcloud database user
+dbUser="nextcloud_db_user"
+# TODO: The password of the Nextcloud database user
+dbPassword="MeInPasSw0rT"
+# TODO: Your webserver user
+webserverUser="www-data"
+
+# File names for backup files
+# If you prefer other file names, you'll also have to change the NextcloudRestore.sh script.
+fileNameBackupFileDir="nextcloud-filedir.tar.gz"
+fileNameBackupDataDir="nextcloud-datadir.tar.gz"
+fileNameBackupDb="nextcloud-db.sql"
+
+# Function for error messages
+errorecho() { cat <<< "$@" 1>&2; }
+
+#
+# Check for root
+#
+if [ "$(id -u)" != "0" ]
+then
+	errorecho "ERROR: This script has to be run as root!"
+	exit 1
+fi
+
+#
+# Check if backup dir already exists
+#
+if [ ! -d "${backupdir}" ]
+then
+	mkdir -p "${backupdir}"
+else
+	errorecho "ERROR: The backup directory ${backupdir} already exists!"
+	exit 1
+fi
+
+#
+# Set maintenance mode
+#
+echo "Set maintenance mode for Nextcloud..."
+cd "${nextcloudFileDir}"
+sudo -u "${webserverUser}" php occ maintenance:mode --on
+cd ~
+echo "Done"
+
+#
+# Stop webserver
+#
+echo "Stopping nginx..."
+service nginx stop
+echo "Done"
+
+#
+# Backup file and data directory
+#
+echo "Creating backup of Nextcloud file directory..."
+tar -cpzf "${backupdir}/${fileNameBackupFileDir}" -C "${nextcloudFileDir}" .
+echo "Done"
+echo "Creating backup of Nextcloud data directory..."
+tar -cpzf "${backupdir}/${fileNameBackupDataDir}"  -C "${nextcloudDataDir}" .
+echo "Done"
+
+#
+# Backup DB
+#
+echo "Backup Nextcloud database..."
+mysqldump --single-transaction -h localhost -u "${dbUser}" -p"${dbPassword}" "${nextcloudDatabase}" > "${backupdir}/${fileNameBackupDb}"
+echo "Done"
+
+#
+# Start webserver
+#
+service nginx start
+
+#
+# Disable maintenance mode
+#
+cd "${nextcloudFileDir}"
+sudo -u "${webserverUser}" php occ maintenance:mode --off
+cd ~
+
+echo "DONE!"
+echo "Backup created: ${backupdir}"
\ No newline at end of file
diff --git a/NextcloudRestore.sh b/NextcloudRestore.sh
new file mode 100644
index 0000000..0a40210
--- /dev/null
+++ b/NextcloudRestore.sh
@@ -0,0 +1,173 @@
+#!/bin/bash
+
+#
+# Bash script for restoring backups of Nextcloud.
+# Usage: ./NextcloudRestor.sh <BackupName> (e.g. ./NextcloudRestor.sh 20170910_132703)
+# 
+# The script is based on an installation of Nextcloud using nginx and MariaDB, see https://decatec.de/home-server/nextcloud-auf-ubuntu-server-mit-nginx-mariadb-php-lets-encrypt-redis-und-fail2ban/
+#
+
+#
+# IMPORTANT
+# You have to customize this script (directories, users, etc.) for your actual environment.
+# All entries which need to be customized are tagged with "TODO".
+#
+
+# Variables
+# TODO: The directory where you store the Nextcloud backups
+backupMainDir="/mnt/Share/NextcloudBackups/"
+restore=$1
+currentRestoreDir="${mainBackupdir}/${restore}"
+# TODO: The directory of your Nextcloud installation (this is a directory under your web root)
+nextcloudFileDir="/var/www/nextcloud"
+# TODO: The directory of your Nextcloud data directory (outside the Nextcloud file directory)
+nextcloudDataDir="/var/nextcloud_data"
+# TODO: Your Nextcloud database name
+nextcloudDatabase="nextcloud_db"
+# TODO: Your Nextcloud database user
+dbUser="nextcloud_db_user"
+# TODO: The password of the Nextcloud database user
+dbPassword="MeInPasSw0rT"
+# TODO: Your webserver user
+webserverUser="www-data"
+
+# File names for backup files
+# If you prefer other file names, you'll also have to change the NextcloudBackup.sh script.
+fileNameBackupFileDir="nextcloud-filedir.tar.gz"
+fileNameBackupDataDir="nextcloud-datadir.tar.gz"
+fileNameBackupDb="nextcloud-db.sql"
+
+# Function for error messages
+errorecho() { cat <<< "$@" 1>&2; }
+
+#
+# Check if parameter given
+#
+if [ $# != "1" ]
+then
+    errorecho "ERROR: No backup name to restore given!"
+	errorecho "Usage: NextcloudRestore.sh 'BackupDate'"
+    exit 1
+fi
+
+#
+# Check for root
+#
+if [ "$(id -u)" != "0" ]
+then
+    errorecho "ERROR: This script has to be run as root!"
+    exit 1
+fi
+
+#
+# Check if backup dir exists
+#
+if [ ! -d "${currentRestoreDir}" ]
+then
+	 errorecho "ERROR: Backup ${restore} not found!"
+    exit 1
+fi
+
+#
+# Set maintenance mode
+#
+echo "Set maintenance mode for Nextcloud..."
+cd "${nextcloudFileDir}"
+sudo -u "${webserverUser}" php occ maintenance:mode --on
+cd ~
+echo "Done"
+
+#
+# Stop webserver
+#
+echo "Stopping nginx..."
+service nginx stop
+echo "Done"
+
+#
+# Delete old Nextcloud direcories
+#
+echo "Deleting old Nextcloud file directory..."
+rm -r "${nextcloudFileDir}"
+mkdir -p "${nextcloudFileDir}"
+echo "Done"
+echo "Deleting old Nextcloud data directory..."
+rm -r "${nextcloudDataDir}"
+mkdir -p "${nextcloudDataDir}"
+echo "Done"
+
+#
+# Restore file and data directory
+#
+echo "Restoring Nextcloud file directory..."
+tar -xpzf "${currentRestoreDir}/${fileNameBackupFileDir}" -C "${nextcloudFileDir}"
+echo "Done"
+echo "Restoring Nextcloud data directory..."
+tar -xpzf "${currentRestoreDir}/${fileNameBackupDataDir}" -C "${nextcloudDataDir}"
+echo "Done"
+
+#
+# Restore database
+#
+echo "Dropping old Nextcloud DB..."
+mysql -h localhost -u "${dbUser}" -p"${dbPassword}" -e "DROP DATABASE ${nextcloudDatabase}"
+echo "Done"
+echo "Creating new DB for Nextcloud..."
+mysql -h localhost -u "${dbUser}" -p"${dbPassword}" -e "CREATE DATABASE ${nextcloudDatabase}"
+echo "Done"
+echo "Restoring backup DB..."
+mysql -h localhost -u "${dbUser}" -p"${dbPassword}" "${nextcloudDatabase}" < "${currentRestoreDir}/${fileNameBackupDb}"
+echo "Done"
+
+#
+# Set directory permissions
+#
+echo "Setting directory permissions..."
+chown -R "${webserverUser}" "${nextcloudFileDir}"
+chown -R "${webserverUser}" "${nextcloudDataDir}"
+echo "Done"
+
+#
+# Start webserver
+#
+echo "Starting nginx..."
+service nginx start
+echo "Done"
+
+#
+# Restore hardened directory permissions
+#
+echo "Set hardened directory permissions..."
+find "${nextcloudFileDir}" -type f -print0 | xargs -0 chmod 0640
+find "${nextcloudFileDir}" -type d -print0 | xargs -0 chmod 0750
+chown -R root:"${webserverUser}" "${nextcloudFileDir}"
+chown -R "${webserverUser}":"${webserverUser}" "${nextcloudFileDir}/apps/"
+chown -R "${webserverUser}":"${webserverUser}" "${nextcloudFileDir}/config/"
+chown -R "${webserverUser}":"${webserverUser}" "${nextcloudFileDir}/themes/"
+chown -R "${webserverUser}":"${webserverUser}" "${nextcloudDataDir}"
+chown root:"${webserverUser}" "${nextcloudFileDir}/.htaccess"
+chown root:"${webserverUser}" "${nextcloudDataDir}/.htaccess"
+chmod 0644 "${nextcloudFileDir}/.htaccess"
+chmod 0644 "${nextcloudDataDir}/.htaccess"
+echo "Done"
+
+#
+# Disbale maintenance mode
+#
+echo "Switching off maintenance mode..."
+cd "${nextcloudFileDir}"
+sudo -u "${webserverUser}" php occ maintenance:mode --off
+cd ~
+echo "Done"
+
+#
+# Update the system data-fingerprint (see https://docs.nextcloud.com/server/12/admin_manual/configuration_server/occ_command.html#maintenance-commands-label)
+#
+echo "Updating the system data-fingerprint..."
+cd "${nextcloudFileDir}"
+sudo -u "${webserverUser}" php occ maintenance:data-fingerprint
+cd ~
+echo "Done"
+
+echo "DONE!"
+echo "Backup ${restore} successfully restored."
\ No newline at end of file
-- 
2.34.1