Add option for gpg encryption

Author: roschaefer

scripts/README.md

@@ -16,9 +16,27 @@ All parameters must be supplied as environment variables:
 | MONGODB\PASSWORD      | yes       |
 | MONGODB\_DATABASE     | yes       |
 | OUTPUT                |           |
+| GPG\_PASSWORD         |           |
+
+If you set `GPG_PASSWORD`, the resulting archive will be encrypted (symmetrically, with the given passphrase).
+This is recommended if you dump the database on your personal laptop because of data security.
 
 After exporting these environment variables to your bash, run:
-```
+
+```bash
 ./remote-dump.sh
 ```
 
+
+# Import into your local mongo db (optional)
+
+Run (but change the file name accordingly):
+```bash
+mongorestore --gzip --archive=human-connection-dump_2018-11-21.archive
+```
+
+If you previously encrypted your dump, run:
+```bash
+gpg --decrypt human-connection-dump_2018-11-21.archive.gpg | mongorestore --gzip --archive
+```
+

scripts/remote-dump.sh

@@ -16,9 +16,17 @@ echo "MONGODB_USERNAME         ${MONGODB_USERNAME}"
 echo "MONGODB_PASSWORD         ${MONGODB_PASSWORD}"
 echo "MONGODB_DATABASE         ${MONGODB_DATABASE}"
 echo "OUTPUT_FILE_NAME         ${OUTPUT_FILE_NAME}"
+echo "GPG_PASSWORD             ${GPG_PASSWORD:-<none>}"
 echo "-------------------------------------------------"
 
 ssh -M -S my-ctrl-socket -fnNT -L 27018:localhost:27017 -l ${SSH_USERNAME} ${SSH_HOST}
-mongodump --host localhost -d ${MONGODB_DATABASE} --port 27018 --username ${MONGODB_USERNAME} --password ${MONGODB_PASSWORD} --authenticationDatabase admin --gzip --archive=${OUTPUT_FILE_NAME}
+
+if [[ -z "${!GPG_PASSWORD}" ]]; then
+  mongodump --host localhost -d ${MONGODB_DATABASE} --port 27018 --username ${MONGODB_USERNAME} --password ${MONGODB_PASSWORD} --authenticationDatabase admin --gzip --archive | gpg -c --batch --passphrase ${GPG_PASSWORD} --output ${OUTPUT_FILE_NAME}.gpg
+else
+  mongodump --host localhost -d ${MONGODB_DATABASE} --port 27018 --username ${MONGODB_USERNAME} --password ${MONGODB_PASSWORD} --authenticationDatabase admin --gzip --archive=${OUTPUT_FILE_NAME}
+fi
+
+
 ssh -S my-ctrl-socket -O check -l ${SSH_USERNAME} ${SSH_HOST}
 ssh -S my-ctrl-socket -O exit  -l ${SSH_USERNAME} ${SSH_HOST}