#!/usr/bin/env bash
set -euo pipefail

TIMESTAMP=$(date +%Y%m%d%H%M%S)
BACKUP_DIR=$(mktemp -d)
trap 'rm -rf "$BACKUP_DIR"' EXIT

gpg --batch --import "${GPG_KEY_FILE}"

DATABASES=$(mysql -u root -e "SHOW DATABASES;" | grep -Ev "^(Database|information_schema|performance_schema|mysql|sys)$")

for DB in $DATABASES; do
  echo "Backing up MariaDB database: $DB"

  FILENAME="mariadb_${DB}_${TIMESTAMP}.sql.gz.gpg"
  if mysqldump -u root "$DB" | gzip | gpg --batch --encrypt --recipient "${GPG_RECIPIENT}" > "$BACKUP_DIR/$FILENAME"; then
    gsutil cp "$BACKUP_DIR/$FILENAME" "gs://${GCS_BUCKET}/mariadb/$FILENAME"
    echo "Successfully uploaded encrypted $FILENAME"
  else
    echo "Failed to backup $DB" >&2
    exit 1
  fi
done