A native backup command

[alexanderadam]

Currently users might be tempted just to backup the database or so. And losing the SSO_SECRET can also lead to integration loss.

An integrated backup command that makes sure that everything can be restored fully and efficiently would be helpful fore sure.

[stefan-ernst]

Yes, that would be useful. It probably needs to live in a script though. The docker container for example is rootless and can't touch many things besides the exposed data dir. Unless we map a separate volume for backups directly?

[alexanderadam]

For the database it can be dumped with the credentials that are available in the container already so I assume that you're referring to uploaded assets?
And even then, having only the data dir should be fine, no? 🤔

Also it might be generally necessary to rotate the SSO_SECRET in some cases. Currently the LLM API keys and the SMTP passwords will be lost, correct?

[stefan-ernst]

Yes, currently everything is encrypted with the SSO_SECRET. Rotating it would be fine for sessions so maybe splitting the two would be an option. I try to avoid too many secrets to keep the setup simple

[stefan-ernst]

Linked PR was delivered with 0.8.8