proxmox-srvbackup 1.6.2__tar.gz

proxmox_srvbackup-1.6.2/.devcontainer/devcontainer.json

@@ -0,0 +1,22 @@
+{
+  "image": "mcr.microsoft.com/devcontainers/python:3.13",
+
+  "postCreateCommand": "bash -lc '\nPY=/usr/local/bin/python;\n$PY -m pip install -U pip && \\\n$PY -m pip install ipykernel && \\\n$PY -m pip install -e . && \\\n# register kernel using this exact interpreter\n$PY -m ipykernel install --name=python3 --display-name=\"Python 3 (3.13)\" --user && \\\n# patch the notebook to point to the python3 kernelspec (VS Code will bind to /usr/local/bin/python)\n$PY - <<\"PY\"\nimport json, pathlib\np = pathlib.Path(\"notebooks/Quickstart.ipynb\")\nif p.exists():\n    nb = json.loads(p.read_text(encoding=\"utf-8\"))\n    md = nb.setdefault(\"metadata\", {})\n    md[\"kernelspec\"] = {\n        \"name\": \"python3\",\n        \"display_name\": \"Python 3 (3.13)\",\n        \"language\": \"python\"\n    }\n    md[\"language_info\"] = {\"name\": \"python\"}\n    p.write_text(json.dumps(nb, ensure_ascii=False, indent=1), encoding=\"utf-8\")\n    print(\"Pinned kernelspec to python3 in\", p)\nelse:\n    print(\"Notebook not found:\", p)\nPY'\n",
+
+  "customizations": {
+    "vscode": {
+      "extensions": ["ms-toolsai.jupyter", "ms-python.python"],
+      "settings": {
+        "workbench.startupEditor": "none",
+        "jupyter.alwaysTrustNotebooks": true,
+        "jupyter.kernelPickerType": "OnlyRecommended",
+        "python.defaultInterpreterPath": "/usr/local/bin/python"
+      }
+    },
+    "codespaces": {
+      "openFiles": ["README.md"]
+    }
+  },
+
+  "postAttachCommand": "bash -lc 'if [ -f notebooks/Quickstart.ipynb ]; then code -r notebooks/Quickstart.ipynb; fi'"
+}

proxmox_srvbackup-1.6.2/.devcontainer/settings.json

@@ -0,0 +1,6 @@
+{
+  "python.defaultInterpreterPath": "/usr/local/bin/python3.13",
+  "jupyter.alwaysTrustNotebooks": true,
+  "jupyter.kernelPickerType": "OnlyRecommended",
+  "jupyter.askForKernelRestart": false
+}

proxmox_srvbackup-1.6.2/.env.example

@@ -0,0 +1,500 @@
+# Copy to .env and fill values as needed.
+
+# Codecov upload token (required for private repos; optional for public repos)
+CODECOV_TOKEN=
+
+# PyPI API token for release workflow (.github/workflows/release.yml)
+# Format: pypi-AgENdGVzdC5weXBpLm9yZwIk...
+PYPI_API_TOKEN=
+
+# Optional: GitHub token for API-limited tasks
+GITHUB_TOKEN=
+
+
+# ==============================================================================
+# Backup Configuration
+# ==============================================================================
+#
+# Naming Convention
+# -----------------
+# Format: <SECTION>__<KEY>=value (double underscore separates section from key)
+#
+# Full environment variable (outside .env):
+#   PROXMOX_SRVBACKUP___BACKUP__<KEY>=value
+#   (triple underscore separates the application slug from the section)
+
+# Purpose: Base directory for storing all backup files
+# Type: string (absolute path)
+# Default: /mnt/zpool-ssd/px-node-backups
+# Environment Variable: PROXMOX_SRVBACKUP___BACKUP__BACKUP_BASE_DIR=/mnt/zpool-ssd/px-node-backups
+# .env: BACKUP__BACKUP_BASE_DIR=/mnt/zpool-ssd/px-node-backups
+# BACKUP__BACKUP_BASE_DIR=/mnt/zpool-ssd/px-node-backups
+
+# Purpose: Maximum number of concurrent backup threads
+# Type: integer (> 0)
+# Default: 4
+# Environment Variable: PROXMOX_SRVBACKUP___BACKUP__MAX_PARALLEL=4
+# .env: BACKUP__MAX_PARALLEL=4
+# BACKUP__MAX_PARALLEL=4
+
+# Purpose: Number of backup files to keep per server (oldest pruned)
+# Type: integer (> 0)
+# Default: 3
+# Environment Variable: PROXMOX_SRVBACKUP___BACKUP__RETENTION_COUNT=3
+# .env: BACKUP__RETENTION_COUNT=3
+# BACKUP__RETENTION_COUNT=3
+
+# Purpose: SSH user for remote server connections
+# Type: string
+# Default: root
+# Environment Variable: PROXMOX_SRVBACKUP___BACKUP__SSH_USER=root
+# .env: BACKUP__SSH_USER=root
+# BACKUP__SSH_USER=root
+
+# Purpose: SSH connection timeout in seconds
+# Type: integer (> 0)
+# Default: 15
+# Environment Variable: PROXMOX_SRVBACKUP___BACKUP__SSH_CONNECT_TIMEOUT=15
+# .env: BACKUP__SSH_CONNECT_TIMEOUT=15
+# BACKUP__SSH_CONNECT_TIMEOUT=15
+
+# Purpose: Directory for storing per-server SSH keypairs
+# Type: string (absolute path)
+# Default: /root/.ssh
+# Environment Variable: PROXMOX_SRVBACKUP___BACKUP__SSH_KEY_DIR=/root/.ssh
+# .env: BACKUP__SSH_KEY_DIR=/root/.ssh
+# BACKUP__SSH_KEY_DIR=/root/.ssh
+
+# Purpose: Filename prefix for per-server SSH keys
+# Type: string
+# Default: backup_pull
+# Environment Variable: PROXMOX_SRVBACKUP___BACKUP__SSH_KEY_PREFIX=backup_pull
+# .env: BACKUP__SSH_KEY_PREFIX=backup_pull
+# BACKUP__SSH_KEY_PREFIX=backup_pull
+
+# Purpose: Path to shared SSH key for initial key deployment (setup-keys command)
+# Type: string (absolute path)
+# Default: (empty, must be configured to use setup-keys)
+# Environment Variable: PROXMOX_SRVBACKUP___BACKUP__BOOTSTRAP_KEY=/path/to/bootstrap.key
+# .env: BACKUP__BOOTSTRAP_KEY=/path/to/bootstrap.key
+# BACKUP__BOOTSTRAP_KEY=/path/to/bootstrap.key
+
+# ==============================================================================
+# Per-Server Backup Overrides
+# ==============================================================================
+#
+# Per-server settings can be overridden via .env using the nested key format:
+#   BACKUP__SERVERS__<SERVER_NAME>__<KEY>=value
+#
+# Use UPPERCASE for the server name, and replace hyphens with underscores:
+#   Server "proxmox-fw" → BACKUP__SERVERS__PROXMOX_FW__...
+#
+# Full environment variable (outside .env):
+#   PROXMOX_SRVBACKUP___BACKUP__SERVERS__<SERVER_NAME>__<KEY>=value
+
+# Purpose: FQDN or IP address for SSH connections to this server
+# Type: string
+# Default: (must be set in TOML or .env)
+# .env: BACKUP__SERVERS__PROXMOX01__HOSTNAME=proxmox01.example.com
+# BACKUP__SERVERS__PROXMOX01__HOSTNAME=proxmox01.example.com
+
+# Purpose: ZFS pool name to snapshot on this server
+# Type: string
+# Default: rpool
+# .env: BACKUP__SERVERS__PROXMOX01__ZFS_POOL=rpool
+# BACKUP__SERVERS__PROXMOX01__ZFS_POOL=rpool
+
+# Purpose: Whether this is the local backup server (skip SSH, run commands locally)
+# Type: boolean (true/false)
+# Default: false
+# .env: BACKUP__SERVERS__PROXMOX_PBS__IS_LOCAL=true
+# BACKUP__SERVERS__PROXMOX_PBS__IS_LOCAL=true
+
+# Purpose: Whether to back up configuration files for this server
+# Type: boolean (true/false)
+# Default: true
+# .env: BACKUP__SERVERS__PROXMOX01__BACKUP_CONFIGFILES=true
+# BACKUP__SERVERS__PROXMOX01__BACKUP_CONFIGFILES=true
+
+# Purpose: Whether to back up ZFS rpool snapshot for this server
+# Type: boolean (true/false)
+# Default: true
+# Set to false for servers without a ZFS rpool (e.g. firewall appliances)
+# .env: BACKUP__SERVERS__PROXMOX_FW__BACKUP_SNAPSHOT=false
+# BACKUP__SERVERS__PROXMOX_FW__BACKUP_SNAPSHOT=false
+
+# ==============================================================================
+# Email Configuration (SMTP)
+# ==============================================================================
+#
+# Naming Convention
+# -----------------
+# Format: <SECTION>__<KEY>=value (double underscore separates section from key)
+# Lists use comma-separated values, booleans use true/false, floats use decimal notation.
+#
+# Full environment variable (outside .env):
+#   PROXMOX_SRVBACKUP___EMAIL__<KEY>=value
+#   (triple underscore separates the application slug from the section)
+
+# Purpose: SMTP servers for email delivery, tried in order (host:port, comma-separated)
+# Type: comma-separated strings in "host[:port]" format
+# Default: (empty, must be configured to send email)
+# Environment Variable: PROXMOX_SRVBACKUP___EMAIL__SMTP_HOSTS=smtp.example.com:587
+# .env: EMAIL__SMTP_HOSTS=smtp.example.com:587
+# EMAIL__SMTP_HOSTS=smtp.example.com:587
+
+# Purpose: Default sender address for outgoing emails
+# Type: string (valid email address)
+# Default: (empty, must be configured or passed via --from)
+# Environment Variable: PROXMOX_SRVBACKUP___EMAIL__FROM_ADDRESS=noreply@example.com
+# .env: EMAIL__FROM_ADDRESS=noreply@example.com
+# EMAIL__FROM_ADDRESS=noreply@example.com
+
+# Purpose: Default recipient addresses (comma-separated)
+# Type: comma-separated strings (valid email addresses)
+# Default: (empty, must be configured or passed via --to)
+# Environment Variable: PROXMOX_SRVBACKUP___EMAIL__RECIPIENTS=admin@example.com,ops@example.com
+# .env: EMAIL__RECIPIENTS=admin@example.com,ops@example.com
+# EMAIL__RECIPIENTS=admin@example.com,ops@example.com
+
+# Purpose: SMTP authentication username
+# Type: string
+# Default: (empty, no authentication)
+# Environment Variable: PROXMOX_SRVBACKUP___EMAIL__SMTP_USERNAME=noreply@example.com
+# .env: EMAIL__SMTP_USERNAME=noreply@example.com
+# EMAIL__SMTP_USERNAME=noreply@example.com
+
+# Purpose: SMTP authentication password
+# Type: string
+# Default: (empty, no authentication)
+# Environment Variable: PROXMOX_SRVBACKUP___EMAIL__SMTP_PASSWORD=your-app-password
+# .env: EMAIL__SMTP_PASSWORD=your-app-password
+# EMAIL__SMTP_PASSWORD=your-app-password
+
+# Purpose: Enable STARTTLS negotiation before authentication
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: PROXMOX_SRVBACKUP___EMAIL__USE_STARTTLS=true
+# .env: EMAIL__USE_STARTTLS=true
+# EMAIL__USE_STARTTLS=true
+
+# Purpose: Socket timeout in seconds for SMTP operations
+# Type: float
+# Default: 30.0
+# Environment Variable: PROXMOX_SRVBACKUP___EMAIL__TIMEOUT=30.0
+# .env: EMAIL__TIMEOUT=30.0
+# EMAIL__TIMEOUT=30.0
+
+# Purpose: Raise FileNotFoundError when attachment files are missing
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: PROXMOX_SRVBACKUP___EMAIL__RAISE_ON_MISSING_ATTACHMENTS=true
+# .env: EMAIL__RAISE_ON_MISSING_ATTACHMENTS=true
+# EMAIL__RAISE_ON_MISSING_ATTACHMENTS=true
+
+# Purpose: Raise ValueError when recipient addresses are invalid
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: PROXMOX_SRVBACKUP___EMAIL__RAISE_ON_INVALID_RECIPIENT=true
+# .env: EMAIL__RAISE_ON_INVALID_RECIPIENT=true
+# EMAIL__RAISE_ON_INVALID_RECIPIENT=true
+
+# ==============================================================================
+# Logging Configuration (lib_log_rich)
+# ==============================================================================
+#
+# Naming Convention
+# -----------------
+# Format: <SECTION>__<KEY>=value (double underscore separates section from key)
+# Strings need no quotes. Booleans: true/false. Floats: 1.0. Lists: comma-separated.
+#
+# Full environment variable (outside .env):
+#   PROXMOX_SRVBACKUP___LIB_LOG_RICH__<KEY>=value
+#
+# For nested subsections (e.g. payload_limits):
+#   PROXMOX_SRVBACKUP___LIB_LOG_RICH__PAYLOAD_LIMITS__<KEY>=value
+#   .env: LIB_LOG_RICH__PAYLOAD_LIMITS__<KEY>=value
+
+# --- Core Identity ---
+
+# Purpose: Logical service name recorded in each log event
+# Type: string (non-empty)
+# Default: "proxmox_srvbackup"
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__SERVICE=my-application
+# .env: LIB_LOG_RICH__SERVICE=my-application
+# LIB_LOG_RICH__SERVICE=my-application
+
+# Purpose: Deployment environment label
+# Type: string (non-empty)
+# Default: "prod"
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__ENVIRONMENT=dev
+# .env: LIB_LOG_RICH__ENVIRONMENT=dev
+# LIB_LOG_RICH__ENVIRONMENT=dev
+
+# --- Console Output ---
+
+# Purpose: Minimum severity level emitted to Rich console
+# Type: string (case-insensitive): "DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"
+# Default: "INFO"
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__CONSOLE_LEVEL=DEBUG
+# .env: LIB_LOG_RICH__CONSOLE_LEVEL=DEBUG
+# LIB_LOG_RICH__CONSOLE_LEVEL=DEBUG
+
+# Purpose: Where to send console output
+# Type: string: "stdout", "stderr", "both", "custom", "none"
+# Default: "stderr"
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__CONSOLE_STREAM=stderr
+# .env: LIB_LOG_RICH__CONSOLE_STREAM=stderr
+# LIB_LOG_RICH__CONSOLE_STREAM=stderr
+
+# Purpose: Console line layout preset
+# Type: string (case-insensitive): "full", "short", "full_loc", "short_loc"
+# Default: "short_loc"
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__CONSOLE_FORMAT_PRESET=short_loc
+# .env: LIB_LOG_RICH__CONSOLE_FORMAT_PRESET=short_loc
+# LIB_LOG_RICH__CONSOLE_FORMAT_PRESET=short_loc
+
+# Purpose: Custom console output template (overrides preset)
+# Type: string (Python str.format template); empty = uses preset
+# Default: (empty, uses preset)
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__CONSOLE_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# .env: LIB_LOG_RICH__CONSOLE_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# LIB_LOG_RICH__CONSOLE_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+
+# Purpose: Rich color palette for console output
+# Type: string: "classic", "dark", "neon", "pastel"
+# Default: "dark"
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__CONSOLE_THEME=dark
+# .env: LIB_LOG_RICH__CONSOLE_THEME=dark
+# LIB_LOG_RICH__CONSOLE_THEME=dark
+
+# Purpose: Override Rich styles per severity level (comma-separated LEVEL=style pairs)
+# Type: comma-separated LEVEL=style pairs
+# Default: (empty, uses theme defaults)
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__CONSOLE_STYLES=DEBUG=dim,ERROR=bold red
+# .env: LIB_LOG_RICH__CONSOLE_STYLES=DEBUG=dim,ERROR=bold red
+# LIB_LOG_RICH__CONSOLE_STYLES=DEBUG=dim,ERROR=bold red
+
+# Purpose: Force ANSI color output even when stderr is not a TTY
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__FORCE_COLOR=true
+# .env: LIB_LOG_RICH__FORCE_COLOR=true
+# LIB_LOG_RICH__FORCE_COLOR=true
+
+# Purpose: Disable color output entirely (overrides force_color)
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__NO_COLOR=false
+# .env: LIB_LOG_RICH__NO_COLOR=false
+# LIB_LOG_RICH__NO_COLOR=false
+
+# --- Backend Adapters ---
+
+# Purpose: Minimum severity threshold for journald and Windows Event Log
+# Type: string (case-insensitive): "DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"
+# Default: "WARNING"
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__BACKEND_LEVEL=WARNING
+# .env: LIB_LOG_RICH__BACKEND_LEVEL=WARNING
+# LIB_LOG_RICH__BACKEND_LEVEL=WARNING
+
+# Purpose: Enable systemd journald adapter (Linux only; requires python3-systemd)
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__ENABLE_JOURNALD=true
+# .env: LIB_LOG_RICH__ENABLE_JOURNALD=true
+# LIB_LOG_RICH__ENABLE_JOURNALD=true
+
+# Purpose: Enable Windows Event Log adapter (Windows only)
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__ENABLE_EVENTLOG=false
+# .env: LIB_LOG_RICH__ENABLE_EVENTLOG=false
+# LIB_LOG_RICH__ENABLE_EVENTLOG=false
+
+# --- Graylog / GELF ---
+
+# Purpose: Enable Graylog adapter for centralized logging
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__ENABLE_GRAYLOG=true
+# .env: LIB_LOG_RICH__ENABLE_GRAYLOG=true
+# LIB_LOG_RICH__ENABLE_GRAYLOG=true
+
+# Purpose: Graylog server address (host:port)
+# Type: string "host:port"
+# Default: (none, must be configured to enable Graylog)
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__GRAYLOG_ENDPOINT=graylog.example.com:12201
+# .env: LIB_LOG_RICH__GRAYLOG_ENDPOINT=graylog.example.com:12201
+# LIB_LOG_RICH__GRAYLOG_ENDPOINT=graylog.example.com:12201
+
+# Purpose: Transport protocol for Graylog (tcp, udp); TLS only supported with tcp
+# Type: string: "tcp", "udp"
+# Default: "tcp"
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__GRAYLOG_PROTOCOL=tcp
+# .env: LIB_LOG_RICH__GRAYLOG_PROTOCOL=tcp
+# LIB_LOG_RICH__GRAYLOG_PROTOCOL=tcp
+
+# Purpose: Wrap Graylog TCP connection in TLS
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__GRAYLOG_TLS=true
+# .env: LIB_LOG_RICH__GRAYLOG_TLS=true
+# LIB_LOG_RICH__GRAYLOG_TLS=true
+
+# Purpose: Minimum severity level sent to Graylog
+# Type: string (case-insensitive): "DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"
+# Default: "WARNING"
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__GRAYLOG_LEVEL=WARNING
+# .env: LIB_LOG_RICH__GRAYLOG_LEVEL=WARNING
+# LIB_LOG_RICH__GRAYLOG_LEVEL=WARNING
+
+# --- Queue Settings ---
+
+# Purpose: Route log events through background queue worker (false = synchronous, blocks on I/O)
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__QUEUE_ENABLED=true
+# .env: LIB_LOG_RICH__QUEUE_ENABLED=true
+# LIB_LOG_RICH__QUEUE_ENABLED=true
+
+# Purpose: Maximum pending events before queue full policy applies
+# Type: integer (> 0)
+# Default: 2048
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__QUEUE_MAXSIZE=2048
+# .env: LIB_LOG_RICH__QUEUE_MAXSIZE=2048
+# LIB_LOG_RICH__QUEUE_MAXSIZE=2048
+
+# Purpose: Behavior when queue is full
+# Type: string: "block" (wait for space), "drop" (discard events)
+# Default: "block"
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__QUEUE_FULL_POLICY=block
+# .env: LIB_LOG_RICH__QUEUE_FULL_POLICY=block
+# LIB_LOG_RICH__QUEUE_FULL_POLICY=block
+
+# Purpose: Timeout in seconds for blocking queue puts (0 = infinite wait)
+# Type: float (>= 0)
+# Default: 1.0
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__QUEUE_PUT_TIMEOUT=1.0
+# .env: LIB_LOG_RICH__QUEUE_PUT_TIMEOUT=1.0
+# LIB_LOG_RICH__QUEUE_PUT_TIMEOUT=1.0
+
+# Purpose: Maximum wait in seconds for queue drain during shutdown
+# Type: float (> 0)
+# Default: 5.0
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__QUEUE_STOP_TIMEOUT=5.0
+# .env: LIB_LOG_RICH__QUEUE_STOP_TIMEOUT=5.0
+# LIB_LOG_RICH__QUEUE_STOP_TIMEOUT=5.0
+
+# --- Ring Buffer ---
+
+# Purpose: Enable in-memory circular buffer for log history (enables log.dump())
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__ENABLE_RING_BUFFER=true
+# .env: LIB_LOG_RICH__ENABLE_RING_BUFFER=true
+# LIB_LOG_RICH__ENABLE_RING_BUFFER=true
+
+# Purpose: Maximum events retained in ring buffer
+# Type: integer (> 0)
+# Default: 25000
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__RING_BUFFER_SIZE=25000
+# .env: LIB_LOG_RICH__RING_BUFFER_SIZE=25000
+# LIB_LOG_RICH__RING_BUFFER_SIZE=25000
+
+# --- Dump Format ---
+
+# Purpose: Default layout for text dumps
+# Type: string (case-insensitive): "full", "short", "full_loc", "short_loc"
+# Default: "full"
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__DUMP_FORMAT_PRESET=full
+# .env: LIB_LOG_RICH__DUMP_FORMAT_PRESET=full
+# LIB_LOG_RICH__DUMP_FORMAT_PRESET=full
+
+# Purpose: Custom template for text dumps (overrides preset)
+# Type: string (Python str.format template); empty = uses preset
+# Default: (empty, uses preset)
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__DUMP_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# .env: LIB_LOG_RICH__DUMP_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# LIB_LOG_RICH__DUMP_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+
+# --- Security & Payload ---
+
+# Purpose: Regex patterns to redact sensitive data (comma-separated field=regex pairs)
+# Type: comma-separated field=regex pairs
+# Default: password=.+,secret=.+,token=.+
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__SCRUB_PATTERNS=password=.+,secret=.+,token=.+,api_key=.+
+# .env: LIB_LOG_RICH__SCRUB_PATTERNS=password=.+,secret=.+,token=.+,api_key=.+
+# LIB_LOG_RICH__SCRUB_PATTERNS=password=.+,secret=.+,token=.+,api_key=.+
+
+# Purpose: Throttle log emissions (MAX_EVENTS:WINDOW_SECONDS)
+# Type: string "max_events:window_seconds"
+# Default: (none, no rate limiting)
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__RATE_LIMIT=100:60
+# .env: LIB_LOG_RICH__RATE_LIMIT=100:60
+# LIB_LOG_RICH__RATE_LIMIT=100:60
+
+# --- Payload Limits ---
+
+# Purpose: Truncate vs reject oversized messages
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__PAYLOAD_LIMITS__TRUNCATE_MESSAGE=true
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__TRUNCATE_MESSAGE=true
+# LIB_LOG_RICH__PAYLOAD_LIMITS__TRUNCATE_MESSAGE=true
+
+# Purpose: Maximum characters in primary log message
+# Type: integer
+# Default: 4096
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__PAYLOAD_LIMITS__MESSAGE_MAX_CHARS=4096
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__MESSAGE_MAX_CHARS=4096
+# LIB_LOG_RICH__PAYLOAD_LIMITS__MESSAGE_MAX_CHARS=4096
+
+# Purpose: Maximum keys in extra metadata dict
+# Type: integer
+# Default: 25
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_KEYS=25
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_KEYS=25
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_KEYS=25
+
+# Purpose: Maximum characters per extra value (after stringify)
+# Type: integer
+# Default: 512
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_VALUE_CHARS=512
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_VALUE_CHARS=512
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_VALUE_CHARS=512
+
+# Purpose: Maximum nesting depth for extra structures
+# Type: integer
+# Default: 3
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_DEPTH=3
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_DEPTH=3
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_DEPTH=3
+
+# Purpose: Total UTF-8 byte limit for sanitized extra payload
+# Type: integer
+# Default: 8192
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_TOTAL_BYTES=8192
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_TOTAL_BYTES=8192
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_TOTAL_BYTES=8192
+
+# Purpose: Maximum keys in LogContext.extra
+# Type: integer
+# Default: 20
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_KEYS=20
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_KEYS=20
+# LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_KEYS=20
+
+# Purpose: Maximum characters per context value
+# Type: integer
+# Default: 256
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_VALUE_CHARS=256
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_VALUE_CHARS=256
+# LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_VALUE_CHARS=256
+
+# Purpose: Number of frames preserved in exception tracebacks
+# Type: integer
+# Default: 10
+# Environment Variable: PROXMOX_SRVBACKUP___LIB_LOG_RICH__PAYLOAD_LIMITS__STACKTRACE_MAX_FRAMES=10
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__STACKTRACE_MAX_FRAMES=10
+# LIB_LOG_RICH__PAYLOAD_LIMITS__STACKTRACE_MAX_FRAMES=10

proxmox_srvbackup-1.6.2/.github/actions/extract-metadata/action.yml

@@ -0,0 +1,92 @@
+name: Extract project metadata
+description: >-
+  Parse pyproject.toml and expose project metadata as step outputs.
+  Requires Python to be available in the runner environment.
+  Auto-installs rtoml if not already present.
+
+outputs:
+  PACKAGE_MODULE:
+    description: Python-importable module name (underscored)
+    value: ${{ steps.meta.outputs.PACKAGE_MODULE }}
+  PROJECT_NAME:
+    description: Project name from pyproject.toml
+    value: ${{ steps.meta.outputs.PROJECT_NAME }}
+  CLI_BIN:
+    description: CLI entry-point binary name
+    value: ${{ steps.meta.outputs.CLI_BIN }}
+  SRC_PATH:
+    description: Source directory path (e.g. "src")
+    value: ${{ steps.meta.outputs.SRC_PATH }}
+  COV_FAIL_UNDER:
+    description: Minimum coverage percentage from tool.coverage.report.fail_under
+    value: ${{ steps.meta.outputs.COV_FAIL_UNDER }}
+  COV_REPORT_FILE:
+    description: Coverage report filename (e.g. "coverage.xml")
+    value: ${{ steps.meta.outputs.COV_REPORT_FILE }}
+  PYTEST_VERBOSITY:
+    description: Pytest verbosity flag (e.g. "-vv")
+    value: ${{ steps.meta.outputs.PYTEST_VERBOSITY }}
+  BANDIT_SKIP_FLAG:
+    description: Bandit skip flag string (e.g. "-s B101,B601") or empty
+    value: ${{ steps.meta.outputs.BANDIT_SKIP_FLAG }}
+
+runs:
+  using: composite
+  steps:
+    - name: Extract project metadata from pyproject.toml
+      id: meta
+      shell: python
+      run: |
+        import os, subprocess, sys
+        try:
+            import rtoml
+        except ModuleNotFoundError:
+            subprocess.check_call([sys.executable, "-m", "pip", "install", "rtoml", "-q"])
+            import rtoml
+
+        from pathlib import Path
+        data = rtoml.load(Path('pyproject.toml'))
+
+        # --- [project] section ---
+        project = data['project']['name']
+        module = project.replace('-', '_')
+        dash = project.replace('_', '-')
+        scripts = list(data['project'].get('scripts', {}).keys())
+        cli_bin = scripts[0] if scripts else dash
+
+        # --- [tool.scripts.test] section ---
+        scripts_test = data.get('tool', {}).get('scripts', {}).get('test', {})
+        src_path = scripts_test.get('src-path', 'src')
+        pytest_verbosity = scripts_test.get('pytest-verbosity', '-vv')
+        cov_report_file = scripts_test.get('coverage-report-file', 'coverage.xml')
+
+        # --- [tool.coverage.report] section ---
+        cov_fail_under = (
+            data.get('tool', {}).get('coverage', {}).get('report', {}).get('fail_under', 90)
+        )
+
+        # --- [tool.bandit] section ---
+        bandit_skips = data.get('tool', {}).get('bandit', {}).get('skips', [])
+        bandit_skip_flag = f"-s {','.join(bandit_skips)}" if bandit_skips else ""
+
+        # Write to GITHUB_OUTPUT for composite action outputs
+        with open(os.environ['GITHUB_OUTPUT'], 'a', encoding='utf-8') as out:
+            out.write(f"PROJECT_NAME={project}\n")
+            out.write(f"PACKAGE_MODULE={module}\n")
+            out.write(f"CLI_BIN={cli_bin}\n")
+            out.write(f"SRC_PATH={src_path}\n")
+            out.write(f"PYTEST_VERBOSITY={pytest_verbosity}\n")
+            out.write(f"COV_REPORT_FILE={cov_report_file}\n")
+            out.write(f"COV_FAIL_UNDER={cov_fail_under}\n")
+            out.write(f"BANDIT_SKIP_FLAG={bandit_skip_flag}\n")
+
+        # Also write to GITHUB_ENV so subsequent steps can use ${{ env.VAR }}
+        with open(os.environ['GITHUB_ENV'], 'a', encoding='utf-8') as env:
+            env.write(f"PROJECT_NAME={project}\n")
+            env.write(f"PACKAGE_MODULE={module}\n")
+            env.write(f"CLI_BIN={cli_bin}\n")
+            env.write(f"SRC_PATH={src_path}\n")
+            env.write(f"PYTEST_VERBOSITY={pytest_verbosity}\n")
+            env.write(f"COV_REPORT_FILE={cov_report_file}\n")
+            env.write(f"COV_FAIL_UNDER={cov_fail_under}\n")
+            env.write(f"BANDIT_SKIP_FLAG={bandit_skip_flag}\n")

proxmox_srvbackup-1.6.2/.github/dependabot.yml

@@ -0,0 +1,22 @@
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "direct"
+    labels:
+      - "dependencies"
+    commit-message:
+      prefix: "deps"
+      include: "scope"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+    commit-message:
+      prefix: "deps"
+      include: "scope"

proxmox_srvbackup-1.6.2/.github/workflows/codeql.yml

@@ -0,0 +1,39 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [ main, master ]
+  pull_request:
+    branches: [ main, master ]
+  schedule:
+    - cron: '0 8 * * 1'
+
+jobs:
+  analyze:
+    name: CodeQL Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'python' ]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v4
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:${{ matrix.language }}"