Initial resurrection kit — 81 scripts, 62 references, configs, systemd units, crons, Docker compose files, Caddy config, master README

scripts/backup-audit-check.sh

@@ -0,0 +1,41 @@
+#!/bin/bash
+# backup-audit-check.sh — Daily check: was yesterday's full backup successful?
+# Runs ~1h after scheduled backup (2 AM UTC). Reports to Germaine.
+
+set -euo pipefail
+
+ENDPOINT="https://s3.us-east-1.wasabisys.com"
+BUCKET="hermes-vps-backups"
+PREFIX="hermes-full-backup"
+
+if [ -f /opt/awscli-venv/bin/activate ]; then
+    source /opt/awscli-venv/bin/activate
+fi
+
+# Get the latest backup file
+latest=$(aws s3 ls "s3://$BUCKET/$PREFIX/" --endpoint-url "$ENDPOINT" 2>&1 | grep "\.tar\.gz$" | sort | tail -1)
+
+if [ -z "$latest" ]; then
+    echo "🔴 BACKUP AUDIT: No full backup archives found on S3!"
+    exit 1
+fi
+
+date_str=$(echo "$latest" | awk '{print $1}')
+size_bytes=$(echo "$latest" | awk '{print $3}')
+file_name=$(echo "$latest" | awk '{print $4}')
+
+# Convert date to epoch
+backup_epoch=$(date -d "$date_str" +%s 2>/dev/null || date -j -f "%Y-%m-%d" "$date_str" +%s 2>/dev/null)
+now_epoch=$(date +%s)
+age_hours=$(( (now_epoch - backup_epoch) / 3600 ))
+
+if [ "$age_hours" -lt 36 ]; then
+    echo "✅ BACKUP OK — Last full backup: $file_name ($date_str, ${size_bytes}B, ${age_hours}h ago)"
+    exit 0
+elif [ "$age_hours" -lt 60 ]; then
+    echo "⚠️ BACKUP WARNING — Last backup $age_hours hours old: $file_name"
+    exit 0
+else
+    echo "🔴 BACKUP STALE — Last backup was $age_hours hours ago: $file_name"
+    exit 1
+fi