Refactor Backupdrop: Enhance Docker setup, implement retention policies, and improve web interface

- Updated Docker configuration to build from Dockerfile and expose port 8080.
- Added non-root user for PHP-FPM and adjusted permissions for log directories.
- Introduced FolderConfig and RetentionManager classes to manage backup configurations and retention policies.
- Enhanced web interface with settings for password protection and retention rules.
- Implemented cron script for periodic retention cleanup.
- Updated upload handling to support new retention logic and file management.
- Improved HTML structure and styling for better user experience.
- Changed file permissions for various scripts and configuration files.

Author: geek-at

.dockerignore

@@ -21,10 +21,14 @@
 
 # Features
 - Selfhostable
+- **Per-folder retention policies** with Proxmox-style rules (keep last N, hourly, daily, weekly, monthly, yearly)
+- **Password protection** per backup target via web interface
 - Handles backup versions by date, size and count
 - File based - no database needed
 - Supports multiple [local and cloud endpoints](/rtfm/storage.md)
 - Supports multiple backup sources (machines you want to back up), distinguished by hostname
+- Web interface for managing retention settings and viewing backups
+- Automated cleanup via cron script
 - No dependencies unless you want cloud endpoints
 
 # Basics
@@ -121,4 +125,39 @@ Result:
 ## Configuration
 To change default settings you need to copy or rename `/config/example.config.inc.php` to `/config/config.inc.php` and change the values as needed.
 
-Check out [the example config file](/config/example.config.inc.php) to see what how you can configure BackupDrop.
+Check out [the example config file](/config/example.config.inc.php) to see what how you can configure BackupDrop.
+
+## Per-Folder Retention & Settings
+
+Each backup target can now have individual settings accessible via web interface:
+
+```
+http://localhost:8080/[your-backup-target]
+```
+
+Features available per target:
+- **Password protection** - Protect upload form and settings with a password
+- **Retention rules** - Proxmox-style retention (keep last N, hourly, daily, weekly, monthly, yearly)
+- **File tracking** - View all backups with timestamps and sizes
+- **Keep all option** - Disable retention to keep all backups
+
+### Automated Cleanup
+
+Run the cron script to apply retention policies:
+
+```bash
+php web/cron.php
+```
+
+Or set up automated cleanup (recommended):
+```bash
+# Run daily at 3 AM
+0 3 * * * php /path/to/backupdrop/web/cron.php
+```
+
+**For Docker:**
+```bash
+0 3 * * * docker exec backupdrop-backupdrop-1 php /var/www/backupdrop/web/cron.php
+```
+
+For detailed information, see the [retention configuration guide](/rtfm/retention-configuration.md).

.github/workflows/build-docker.yml

@@ -0,0 +1,25 @@
+version: '3.8'
+
+services:
+  backupdrop:
+    image: hascheksolutions/backupdrop
+    ports:
+      - "8080:80"
+    environment:
+      # remove unneeded config options
+      - ENCRYPTION_AGE_SSH_PUBKEY=
+      - ENCRYPTION_AGE_PUBKEY=
+      - S3_BUCKET=
+      - S3_ACCESS_KEY=
+      - S3_SECRET_KEY=
+      - S3_ENDPOINT=
+      - FTP_SSL=
+      - FTP_SERVER=
+      - FTP_PORT=
+      - FTP_USER=
+      - FTP_PASS=
+      - FTP_BASEDIR=
+    restart: unless-stopped
+    volumes:
+      - ./data:/var/www/backupdrop/data
+

LICENSE

@@ -2,9 +2,11 @@ version: '3.8'
 
 services:
   backupdrop:
-    image: hascheksolutions/backupdrop
+    build:
+      context: .
+      dockerfile: docker/Dockerfile
     ports:
-      - "8080:80"
+      - "8080:8080"
     environment:
       # remove unneeded config options
       - ENCRYPTION_AGE_SSH_PUBKEY=
@@ -13,9 +15,6 @@ services:
       - S3_ACCESS_KEY=
       - S3_SECRET_KEY=
       - S3_ENDPOINT=
-      - KEEP_N_BACKUPS=
-      - KEEP_N_DAYS=
-      - KEEP_N_GIGABYTES=
       - FTP_SSL=
       - FTP_SERVER=
       - FTP_PORT=
@@ -24,5 +23,5 @@ services:
       - FTP_BASEDIR=
     restart: unless-stopped
     volumes:
-      - ./data:/var/www/backupdrop/data
-
+      - ./:/var/www/backupdrop
+      - ./data:/var/www/backupdrop/data

README.md

@@ -21,20 +21,35 @@ RUN mkdir -p /run/nginx
 RUN mkdir -p /var/log/nginx
 
 # php stuff
-RUN sed -i 's/nobody/nginx/g' /etc/php83/php-fpm.d/www.conf
+RUN sed -i 's/nobody/backupdrop/g' /etc/php83/php-fpm.d/www.conf
+RUN sed -i 's/group = nobody/group = backupdrop/g' /etc/php83/php-fpm.d/www.conf
 RUN sed -i 's/E_ALL \& ~E_DEPRECATED \& ~E_STRICT/E_ALL \& ~E_DEPRECATED \& ~E_STRICT \& ~E_NOTICE \& ~E_WARNING/g' /etc/php83/php.ini
 # disable upload file size limit
 RUN sed -i 's/upload_max_filesize = 2M/upload_max_filesize = 0/g' /etc/php83/php.ini
 RUN sed -i 's/post_max_size = 8M/post_max_size = 0/g' /etc/php83/php.ini
+# Fix PHP-FPM log directory
+RUN mkdir -p /var/log/php83 && chmod 755 /var/log/php83
 
 # web interface stuff
 WORKDIR /var/www/backupdrop/web/lib
 RUN composer install
 WORKDIR /var/www/backupdrop/
 
-EXPOSE 80
+# Create non-root user and set permissions
+RUN addgroup -g 1000 backupdrop && \
+    adduser -D -u 1000 -G backupdrop backupdrop && \
+    chown -R backupdrop:backupdrop /var/www/backupdrop && \
+    chown -R backupdrop:backupdrop /var/log/nginx && \
+    chown -R backupdrop:backupdrop /var/log/php83 && \
+    chown -R backupdrop:backupdrop /var/lib/nginx && \
+    chown -R backupdrop:backupdrop /run/nginx && \
+    mkdir -p /var/log/php-fpm && \
+    chown -R backupdrop:backupdrop /var/log/php-fpm
+
+# Switch to non-root user
+USER backupdrop
+
+EXPOSE 8080
 VOLUME /var/www/backupdrop/data
 
-
-#CMD ["/bin/ash"]
 ENTRYPOINT ["/etc/start.sh"]