From 6b0c271c1eb007f4edb088afda653a4e9bfee201 Mon Sep 17 00:00:00 2001
From: Frank John Begornia <frank.begornia@yahoo.com>
Date: Tue, 6 Jan 2026 13:20:30 +0800
Subject: [PATCH] Fix backup script to load credentials from .env

---
 .gitea/workflows/backup.yml | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/backup.yml b/.gitea/workflows/backup.yml
index 0164699..1243ece 100644
--- a/.gitea/workflows/backup.yml
+++ b/.gitea/workflows/backup.yml
@@ -39,6 +39,7 @@ jobs:
             BACKUP_BASE="/var/backups/minio"
             BACKUP_DIR="$BACKUP_BASE/$(date +%Y%m%d_%H%M%S)"
             CONTAINER_NAME="crew-minio-prod"
+            DEPLOY_DIR="/var/www/apps/minio-storage"
 
             echo "📦 Starting MinIO backup to $BACKUP_DIR"
             sudo mkdir -p "$BACKUP_DIR"
@@ -50,6 +51,25 @@ jobs:
               exit 1
             fi
 
+            # Load credentials from .env file
+            echo "🔑 Loading MinIO credentials"
+            if [ ! -f "$DEPLOY_DIR/.env" ]; then
+              echo "❌ .env file not found at $DEPLOY_DIR/.env"
+              exit 1
+            fi
+
+            # Source .env and export variables
+            set -a
+            source "$DEPLOY_DIR/.env"
+            set +a
+
+            if [ -z "$MINIO_ROOT_USER" ] || [ -z "$MINIO_ROOT_PASSWORD" ]; then
+              echo "❌ MINIO_ROOT_USER or MINIO_ROOT_PASSWORD not set in .env"
+              exit 1
+            fi
+
+            echo "✓ Credentials loaded (User: $MINIO_ROOT_USER)"
+
             echo "🔧 Installing MinIO client if needed"
             docker exec $CONTAINER_NAME sh -c "
               if ! command -v mc &> /dev/null; then
@@ -60,7 +80,7 @@ jobs:
 
             echo "⚙️  Configuring MinIO client"
             docker exec $CONTAINER_NAME mc alias set backup http://localhost:9000 \
-              ${MINIO_ROOT_USER:-minioadmin} ${MINIO_ROOT_PASSWORD:-minioadmin123}
+              "$MINIO_ROOT_USER" "$MINIO_ROOT_PASSWORD"
 
             # Backup each bucket
             BUCKETS="crewsportswear merchbay merchbay-admin crew-admin email-reports"