#!/bin/bash
# ============================================
# Proxmox Infrastruktur Backup Script
# ============================================
# Ausfuehrung: ./backup.sh [service|all]
# Cronjob: 0 3 * * * /opt/scripts/backup.sh all >> /var/log/backup.log 2>&1

set -euo pipefail

BACKUP_DIR="/opt/backups"
DATE=$(date +%Y%m%d_%H%M%S)
RETENTION_DAYS=7

# Farben fuer Output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m'

log_info() { echo -e "${GREEN}[INFO]${NC} $(date '+%Y-%m-%d %H:%M:%S') $1"; }
log_warn() { echo -e "${YELLOW}[WARN]${NC} $(date '+%Y-%m-%d %H:%M:%S') $1"; }
log_error() { echo -e "${RED}[ERROR]${NC} $(date '+%Y-%m-%d %H:%M:%S') $1"; }

# Backup-Verzeichnis erstellen
mkdir -p "$BACKUP_DIR"

backup_nextcloud() {
    log_info "Starte Nextcloud Backup..."
    local backup_file="$BACKUP_DIR/nextcloud_$DATE.tar.gz"

    # Maintenance Mode aktivieren
    docker exec nextcloud php occ maintenance:mode --on || true

    # Daten sichern
    tar -czf "$backup_file" \
        -C /opt/docker/nextcloud \
        data db \
        2>/dev/null

    # Maintenance Mode deaktivieren
    docker exec nextcloud php occ maintenance:mode --off || true

    log_info "Nextcloud Backup erstellt: $backup_file ($(du -h "$backup_file" | cut -f1))"
}

backup_vaultwarden() {
    log_info "Starte Vaultwarden Backup..."
    local backup_file="$BACKUP_DIR/vaultwarden_$DATE.tar.gz"

    tar -czf "$backup_file" \
        -C /opt/docker \
        vaultwarden \
        2>/dev/null

    log_info "Vaultwarden Backup erstellt: $backup_file ($(du -h "$backup_file" | cut -f1))"
}

backup_gitea() {
    log_info "Starte Gitea Backup..."
    local backup_file="$BACKUP_DIR/gitea_$DATE.tar.gz"

    # Gitea internen Backup-Befehl nutzen
    docker exec -u git gitea gitea dump -c /data/gitea/conf/app.ini -f /data/gitea-dump.zip || true

    # Dump und Daten sichern
    tar -czf "$backup_file" \
        -C /opt/docker/gitea \
        . \
        2>/dev/null

    log_info "Gitea Backup erstellt: $backup_file ($(du -h "$backup_file" | cut -f1))"
}

backup_n8n() {
    log_info "Starte n8n Backup..."
    local backup_file="$BACKUP_DIR/n8n_$DATE.tar.gz"

    tar -czf "$backup_file" \
        -C /opt/docker \
        n8n \
        2>/dev/null

    log_info "n8n Backup erstellt: $backup_file ($(du -h "$backup_file" | cut -f1))"
}

backup_audiobookshelf() {
    log_info "Starte Audiobookshelf Backup..."
    local backup_file="$BACKUP_DIR/audiobookshelf_$DATE.tar.gz"

    # Nur Config und Metadata, nicht die Audiobooks selbst
    tar -czf "$backup_file" \
        -C /opt/docker/audiobookshelf \
        config metadata \
        2>/dev/null

    log_info "Audiobookshelf Backup erstellt: $backup_file ($(du -h "$backup_file" | cut -f1))"
}

backup_configs() {
    log_info "Starte Config Backup..."
    local backup_file="$BACKUP_DIR/configs_$DATE.tar.gz"

    tar -czf "$backup_file" \
        /opt/docker/docker-compose.yml \
        /opt/docker/gitea/docker-compose.yml \
        /etc/wireguard/wg0.conf \
        2>/dev/null || true

    log_info "Config Backup erstellt: $backup_file"
}

cleanup_old_backups() {
    log_info "Loesche Backups aelter als $RETENTION_DAYS Tage..."
    find "$BACKUP_DIR" -name "*.tar.gz" -mtime +$RETENTION_DAYS -delete
    log_info "Cleanup abgeschlossen"
}

backup_all() {
    log_info "========== VOLLSTAENDIGES BACKUP GESTARTET =========="
    backup_nextcloud
    backup_vaultwarden
    backup_gitea
    backup_n8n
    backup_audiobookshelf
    backup_configs
    cleanup_old_backups
    log_info "========== BACKUP ABGESCHLOSSEN =========="
    log_info "Backup-Groesse gesamt: $(du -sh "$BACKUP_DIR" | cut -f1)"
}

# Hauptprogramm
case "${1:-all}" in
    nextcloud)      backup_nextcloud ;;
    vaultwarden)    backup_vaultwarden ;;
    gitea)          backup_gitea ;;
    n8n)            backup_n8n ;;
    audiobookshelf) backup_audiobookshelf ;;
    configs)        backup_configs ;;
    all)            backup_all ;;
    *)
        echo "Verwendung: $0 [nextcloud|vaultwarden|gitea|n8n|audiobookshelf|configs|all]"
        exit 1
        ;;
esac