From f931dd939cd5109906399bd470497c9831e5d2f7 Mon Sep 17 00:00:00 2001
From: Alex Auvolat <alex@adnab.me>
Date: Sun, 15 Nov 2020 19:43:33 +0100
Subject: Add cryptography to consul backup

---
 app/build/backup-consul/do_backup.sh | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

(limited to 'app/build/backup-consul/do_backup.sh')

diff --git a/app/build/backup-consul/do_backup.sh b/app/build/backup-consul/do_backup.sh
index 049c998..4dbae2a 100755
--- a/app/build/backup-consul/do_backup.sh
+++ b/app/build/backup-consul/do_backup.sh
@@ -13,7 +13,8 @@ Host backuphost
 	User $TARGET_SSH_USER
 EOF
 
-consul kv export > consul_kv_dump.json
-gzip consul_kv_dump.json
+consul kv export | \
+	gzip | \
+	age -r "$(cat /root/.ssh/id_ed25519.pub)" | \
+	ssh backuphost "cat > $TARGET_SSH_DIR/consul/consul_kv_export.gz.age"
 
-rsync -vvvz --progress consul_kv_dump.json.gz "backuphost:$TARGET_SSH_DIR/consul/"
-- 
cgit v1.2.3