1const BACKUP_DIR = join(ROOT, 'admin', '_backups')
2const BACKUP_CONFIG = join(ROOT, 'admin', 'backupConfig.json')

1{
2  "autoBackup": false,
3  "interval": "daily",
4  "retention": 10,
5  "cloudProvider": ""
6}

 1app.post('/api/backup/create', (req, res) => {
 2  const ts = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19)
 3  const filename = `backup-${ts}.tar.gz`
 4  const filepath = join(BACKUP_DIR, filename)
 5
 6  const dirsToBackup = ['content', 'static', 'hugo.toml', 'config']
 7    .filter(d => existsSync(join(ROOT, d)))
 8
 9  execSync(`tar -czf "${filepath}" -C "${ROOT}" ${dirsToBackup.join(' ')}`, {
10    cwd: ROOT,
11    shell: true
12  })
13
14  const stat = statSync(filepath)
15  ok(res, { filename, size: stat.size, created: new Date().toISOString() })
16})

1app.post('/api/backup/restore/:filename', (req, res) => {
2  const fp = join(BACKUP_DIR, req.params.filename)
3  if (!fp.startsWith(BACKUP_DIR)) return fail(res, 403, 'Access denied')
4  if (!existsSync(fp)) return fail(res, 404, 'Backup not found')
5
6  execSync(`tar -xzf "${fp}" -C "${ROOT}"`, { cwd: ROOT, shell: true })
7  ok(res, { status: 'ok' })
8})

 1app.get('/api/backup/list', (req, res) => {
 2  const files = readdirSync(BACKUP_DIR)
 3    .filter(f => f.endsWith('.tar.gz'))
 4    .map(name => {
 5      const fp = join(BACKUP_DIR, name)
 6      const s = statSync(fp)
 7      return { filename: name, size: s.size, created: s.mtime.toISOString() }
 8    })
 9    .sort((a, b) => b.created.localeCompare(a.created))
10  ok(res, { files })
11})

 1// 路径安全检查：确保文件路径在备份目录内
 2app.delete('/api/backup/:filename', (req, res) => {
 3  const fp = join(BACKUP_DIR, req.params.filename)
 4  if (!fp.startsWith(BACKUP_DIR)) return fail(res, 403, 'Access denied')
 5  // ...
 6})
 7
 8// 下载接口：使用 res.download() 确保安全
 9app.get('/api/backup/download/:filename', (req, res) => {
10  const fp = join(BACKUP_DIR, req.params.filename)
11  if (!fp.startsWith(BACKUP_DIR)) return res.status(403).json({ error: 'Access denied' })
12  res.download(fp, req.params.filename)
13})

 1┌──────────────────────────────┐  ┌──────────────────┐
 2│  📦 备份文件                  │  │  ⚙️ 备份设置      │
 3│                              │  │                  │
 4│  [立即备份]                   │  │  自动备份 [开关]  │
 5│                              │  │  备份频率 [选择]  │
 6│  文件名    大小  时间   操作   │  │  保留份数 [数字]  │
 7│  backup-1  390M  12:00 ...   │  │  云存储   [选择]  │
 8│  backup-2  385M  11:00 ...   │  ├──────────────────┤
 9│                              │  │  📊 备份统计      │
10│                              │  │  备份总数: 2      │
11│                              │  │  占用空间: 775MB  │
12│                              │  │  最近备份: 12:00  │
13└──────────────────────────────┘  └──────────────────┘

1async function restoreBackup(row) {
2  await ElMessageBox.confirm(
3    `确定从备份 ${row.filename} 恢复？当前数据将被覆盖！`,
4    '确认恢复',
5    { type: 'warning', confirmButtonText: '确认恢复', cancelButtonText: '取消' }
6  )
7  await restoreBackupApi(row.filename)
8  ElMessage.success('恢复成功，建议重启服务')
9}

1async function loadCloudProviders() {
2  const res = await getImageHostingProviders()
3  cloudProviders.value = Object.values(res.data.providers || {})
4    .filter(p => p.configured && p.enabled)
5}

1const totalSize = computed(() =>
2  backups.value.reduce((sum, b) => sum + (b.size || 0), 0)
3)