28d346d0f5
All checks were successful
Build and Push Docker Image / build-and-push (push) Successful in 54m48s
Admin → Backup: Ziel (SFTP oder Nextcloud/WebDAV) konfigurieren, Verbindung testen, Jetzt sichern,
Zeitplan (aus/täglich/wöchentlich) + Aufbewahrung. Best Practice: verschlüsselt + off-site.
- Verschlüsselung: Backup als tar.gz (database.dump + MinIO-Dateien) → AES-256-GCM mit Passphrase.
Zugangsdaten + Passphrase verschlüsselt in DB (src/lib/crypto-secret.ts, Schlüssel aus Server-Secret)
- Engine (src/lib/backup): pg_dump + archiver-Stream aus MinIO + Stream-Verschlüsselung + Upload + Prune
- Ziel-Adapter: SFTP (ssh2-sftp-client) + WebDAV (webdav), je test/upload/list/delete
- API (SERVER_ADMIN): /api/admin/backup/{config,test,run}; öffentlich per CRON_SECRET: /api/cron/backup
- Scheduler in server-custom.js (stündliche Fälligkeitsprüfung)
- Dockerfile: postgresql16-client (pg_dump) + runtime-Libs; next.config serverExternalPackages
- scripts/decrypt-backup.js + docs/BACKUP.md (Restore-Anleitung), .env.example (CRON_SECRET, BACKUP_ENC_KEY)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
92 lines
3.1 KiB
JavaScript
92 lines
3.1 KiB
JavaScript
const { createServer } = require('http')
|
|
const { parse } = require('url')
|
|
const next = require('next')
|
|
const { Server } = require('socket.io')
|
|
|
|
const dev = process.env.NODE_ENV !== 'production'
|
|
const hostname = process.env.HOSTNAME || '0.0.0.0'
|
|
const port = parseInt(process.env.PORT || '3000', 10)
|
|
|
|
const app = next({ dev, hostname, port })
|
|
const handle = app.getRequestHandler()
|
|
|
|
app.prepare().then(() => {
|
|
const httpServer = createServer(async (req, res) => {
|
|
try {
|
|
const parsedUrl = parse(req.url, true)
|
|
await handle(req, res, parsedUrl)
|
|
} catch (err) {
|
|
console.error('Error occurred handling', req.url, err)
|
|
res.statusCode = 500
|
|
res.end('internal server error')
|
|
}
|
|
})
|
|
|
|
const io = new Server(httpServer, {
|
|
cors: { origin: '*' },
|
|
path: '/socket.io',
|
|
})
|
|
|
|
// Make io globally accessible for API routes
|
|
global.__io = io
|
|
|
|
io.on('connection', (socket) => {
|
|
console.log(`[Socket.io] Client connected: ${socket.id}`)
|
|
|
|
// Client joins a project room
|
|
socket.on('join-project', (projectId) => {
|
|
socket.join(`project:${projectId}`)
|
|
console.log(`[Socket.io] ${socket.id} joined project:${projectId}`)
|
|
})
|
|
|
|
// Client leaves a project room
|
|
socket.on('leave-project', (projectId) => {
|
|
socket.leave(`project:${projectId}`)
|
|
console.log(`[Socket.io] ${socket.id} left project:${projectId}`)
|
|
})
|
|
|
|
// Features updated — broadcast to all others in the project room
|
|
socket.on('features-updated', (data) => {
|
|
const { projectId, features } = data
|
|
socket.to(`project:${projectId}`).emit('features-changed', { features })
|
|
})
|
|
|
|
// Editing lock changed — broadcast to all others in the project room
|
|
socket.on('editing-changed', (data) => {
|
|
const { projectId, editing, editingBy, sessionId } = data
|
|
socket.to(`project:${projectId}`).emit('editing-status', { editing, editingBy, sessionId })
|
|
})
|
|
|
|
// Journal entry added/updated — broadcast to all others
|
|
socket.on('journal-updated', (data) => {
|
|
const { projectId } = data
|
|
socket.to(`project:${projectId}`).emit('journal-changed', { projectId })
|
|
})
|
|
|
|
socket.on('disconnect', () => {
|
|
console.log(`[Socket.io] Client disconnected: ${socket.id}`)
|
|
})
|
|
})
|
|
|
|
httpServer.listen(port, hostname, () => {
|
|
console.log(`> Ready on http://${hostname}:${port}`)
|
|
})
|
|
|
|
// Backup-Scheduler: stündlich prüfen, ob laut Zeitplan ein Backup fällig ist.
|
|
// Die Route /api/cron/backup entscheidet anhand der Konfiguration; hier wird nur getriggert.
|
|
if (process.env.CRON_SECRET) {
|
|
const checkBackup = () => {
|
|
fetch(`http://127.0.0.1:${port}/api/cron/backup`, {
|
|
method: 'POST',
|
|
headers: { 'x-cron-secret': process.env.CRON_SECRET },
|
|
})
|
|
.then((r) => r.json())
|
|
.then((d) => { if (d && d.skipped !== true) console.log('[backup-scheduler]', JSON.stringify(d)) })
|
|
.catch((e) => console.warn('[backup-scheduler]', e.message))
|
|
}
|
|
setInterval(checkBackup, 60 * 60 * 1000) // stündlich
|
|
setTimeout(checkBackup, 90 * 1000) // ~1.5 Min nach Start einmal
|
|
console.log('> Backup-Scheduler aktiv (stündliche Fälligkeitsprüfung)')
|
|
}
|
|
})
|