#!/usr/bin/env bash
set -euo pipefail

BACKUP_DIR=/var/backups/unbound
STAMP=$(date -u +%Y%m%dT%H%M%SZ)
ARTIFACT="$BACKUP_DIR/unbound-$STAMP.tar.gz"
MANIFEST="$BACKUP_DIR/unbound-$STAMP.sha256"

install -d -m 0700 -o root -g root "$BACKUP_DIR"
tar -C / -czf "$ARTIFACT" etc/unbound/unbound.conf etc/unbound/unbound.conf.d
chmod 0600 "$ARTIFACT"

cd "$BACKUP_DIR"
sha256sum "$(basename "$ARTIFACT")" > "$MANIFEST"
chmod 0600 "$MANIFEST"
sha256sum -c "$MANIFEST"
echo "$ARTIFACT"