restore-vault.sh

#!/bin/sh
# Restore Vault data, logs, and certificates from a backup archive.
set -eu

if [ "$#" -ne 1 ]; then
  echo "Usage: $0 <backup-archive.tar.gz>"
  exit 1
fi

ARCHIVE_PATH="$1"

if [ ! -f "${ARCHIVE_PATH}" ]; then
  echo "Backup archive not found: ${ARCHIVE_PATH}"
  exit 1
fi

SCRIPT_DIR=$(CDPATH= cd -- "$(dirname "$0")" && pwd)
REPO_ROOT=$(CDPATH= cd -- "${SCRIPT_DIR}/.." && pwd)

cd "${REPO_ROOT}"

if [ -f ./.env ]; then
  set -a
  # shellcheck disable=SC1091
  . ./.env
  set +a
fi

VAULT_DATA_DIR="${VAULT_DATA_DIR:-./vault-data}"
VAULT_LOGS_DIR="${VAULT_LOGS_DIR:-./vault-logs}"
VAULT_CERTS_DIR="${VAULT_CERTS_DIR:-./vault-certs}"

docker compose down >/dev/null
rm -rf "${VAULT_DATA_DIR}" "${VAULT_LOGS_DIR}" "${VAULT_CERTS_DIR}"
mkdir -p "${VAULT_DATA_DIR}" "${VAULT_LOGS_DIR}" "${VAULT_CERTS_DIR}"
tar -xzf "${ARCHIVE_PATH}" -C .

echo "Restore complete. Start Vault with: docker compose up -d"