backup.sh

#!/usr/bin/env bash

set -e -o pipefail

source /srv/config/backup.config
export RESTIC_REPOSITORY RESTIC_PASSWORD AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY

restic backup \
        --verbose \
        --one-file-system \
        --exclude-if-present .nobackup \
        ${*:-$(find $BACKUP_PATHS -maxdepth 1 -mindepth 1 -type d)} &
wait $!

restic forget \
        --verbose \
        --prune \
        --group-by "paths" \
        --keep-last $RETENTION_LASTS \
        --keep-daily $RETENTION_DAYS \
        --keep-weekly $RETENTION_WEEKS \
        --keep-monthly $RETENTION_MONTHS \
        --keep-yearly $RETENTION_YEARS &
wait $!

echo "Backup & cleaning is done."