security: rustdesk出库+ignore；nginx静态location补齐安全头(修add_header继承丢失)；tasks.py原子写；backup.sh可选异地；拍板清单落盘

2026-09-25 04:27:42 +08:00
parent 54422f44ba
commit 02d27401b0
14 changed files with 73 additions and 749 deletions
@@ -12,5 +12,10 @@ sha256sum "$ARCHIVE" > "$ARCHIVE.sha256"
 # 保留策略：只留最近 7 个归档
 ls -1t "$OUT_DIR"/planning-backup-*.tar.gz 2>/dev/null | tail -n +8 | xargs -r rm -f
 ls -1t "$OUT_DIR"/planning-backup-*.tar.gz.sha256 2>/dev/null | tail -n +8 | xargs -r rm -f
+# 可选异地副本：设置 BACKUP_REMOTE_DIR（形如 user@host:/backups/planning）即同步，不设则跳过
+if [ -n "${BACKUP_REMOTE_DIR:-}" ] && command -v rsync >/dev/null 2>&1; then
+  rsync -a "$OUT_DIR"/planning-backup-*.tar.gz "$OUT_DIR"/planning-backup-*.tar.gz.sha256 "$BACKUP_REMOTE_DIR/"
+  echo "offsite: $BACKUP_REMOTE_DIR"
+fi
 echo "backup: $ARCHIVE"
 cat "$ARCHIVE.sha256"