Avoid passing mysqldump passwords on the command line

[chef.git] / cookbooks / donate / templates / default / backup.cron.erb

diff --git a/cookbooks/donate/templates/default/backup.cron.erb b/cookbooks/donate/templates/default/backup.cron.erb
index 6e82ad0dac138a783f929ab7beafa259e1ffbc54..7ff3ee08aa6413d7e453eb45f63c3c7e0a0fd6ee 100644 (file)
--- a/cookbooks/donate/templates/default/backup.cron.erb
+++ b/cookbooks/donate/templates/default/backup.cron.erb
@@ -1,3 +1,22 @@
+#!/bin/sh
+
 # DO NOT EDIT - This file is being maintained by Chef
 
-# FIXME to follow
+T=$(mktemp -d -t -p /var/tmp osm-donate.XXXXXXXXXX)
+D=$(date +%Y-%m-%d)
+B=osm-donate-$D.tar.gz
+
+mkdir $T/osm-donate-$D
+echo '[mysqldump]' > $T/mysqldump.opts
+echo 'user=donate' >> $T/mysqldump.opts
+echo 'password=<%= @passwords["database"] %>' >> $T/mysqldump.opts
+mysqldump --defaults-file=$T/mysqldump.opts --opt donate > $T/osm-donate-$D/osm-donate.sql
+ln -s /srv/donate.openstreetmap.org $T/osm-donate-$D/www
+
+export GZIP="--rsyncable -9"
+export RSYNC_RSH="ssh -ax"
+
+nice tar --create --gzip --dereference --directory=$T --file=$T/$B osm-donate-$D
+nice rsync $T/$B backup::backup
+
+rm -rf $T