{% extends "base.html" %}
{% block title %}Backups · LibreSignage{% endblock %}
{% block content %}
  <h1>Backups</h1>
  <p class="lead">Export a versioned snapshot of the database, uploads, and published snapshots.</p>
  <div class="alert alert-warning">
    <strong>Treat backups as sensitive.</strong> They contain password and API-token hashes,
    webhook signing secrets, and screen credential nonces. The archive never contains
    plaintext environment secrets. Preserve the original <code>LIBRESIGNAGE_SECRET_KEY</code>
    separately or existing screen credentials will no longer work after restore.
  </div>
  <form method="post" action="{{ url_for('auth.export_backup_route') }}">
    <button class="btn btn-primary" type="submit">Export full backup</button>
  </form>
  <hr>
  <h2 class="h4">Restore</h2>
  <p>Stop the Flask application and monitor, then run:</p>
  <pre><code>libresignage-backup restore ARCHIVE.lsbackup --yes</code></pre>
  <p>Restore validates compatibility, paths, checksums, free space, required tables,
  and SQLite integrity before replacement. It creates a timestamped rollback backup
  and does not import configuration values.</p>
  <h2 class="h4">Automated exports</h2>
  <pre><code>libresignage-backup export /secure/backups/nightly.lsbackup</code></pre>
{% endblock %}