#!/usr/bin/env bash
set -euo pipefail

BACKUP_DIR=/var/backups/pihole
STAMP=$(date -u +%Y%m%dT%H%M%SZ)
ARTIFACT="$BACKUP_DIR/pihole-config-$STAMP.tar.gz"
MANIFEST="$BACKUP_DIR/pihole-config-$STAMP.sha256"

install -d -m 0700 -o root -g root "$BACKUP_DIR"
tar -C /opt/pihole -czf "$ARTIFACT" etc-pihole/pihole.toml etc-pihole/adlists.list etc-pihole/gravity.db
chmod 0600 "$ARTIFACT"

cd "$BACKUP_DIR"
sha256sum "$(basename "$ARTIFACT")" > "$MANIFEST"
chmod 0600 "$MANIFEST"
sha256sum -c "$MANIFEST"
echo "$ARTIFACT"