feat: nightly rsync backup to tank with rrsync-restricted key and sanoid history

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-15 19:09:16 -04:00
parent 0d733c77e7
commit 6643ac003c
3 changed files with 35 additions and 0 deletions
@@ -0,0 +1,10 @@
+#!/opt/homebrew/bin/bash
+# Nightly by launchd (config/xyz.sethpc.mac-backup.plist). Mirrors the DAW-relevant
+# dirs to tank. History comes from sanoid snapshots of tank/backups/mac on pve173,
+# which is what makes `--delete` safe.
+set -euo pipefail
+src=()
+for d in "$HOME/Music/Ableton" "$HOME/Documents"; do [[ -d $d ]] && src+=("$d"); done
+[[ ${#src[@]} -gt 0 ]] || { echo "nothing to back up yet"; exit 0; }
+# Remote path is relative to the rrsync root (/tank/backups/mac) set in root's authorized_keys on pve173.
+exec /opt/homebrew/bin/rsync -a --delete -e 'ssh -o BatchMode=yes' "${src[@]}" root@192.168.0.173:/