install.sh

#!/bin/bash
# =============================================================================
# install.sh
# Single-server installer for SQL Server backup automation
# =============================================================================
# Usage:
#   curl -fsSL https://raw.githubusercontent.com/<org>/sqlbackups/master/install.sh | sudo bash
#
# Or download and run:
#   chmod +x install.sh && sudo ./install.sh
# =============================================================================

set -euo pipefail

# --- Colours and formatting ---------------------------------------------------
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
CYAN='\033[0;36m'
BOLD='\033[1m'
NC='\033[0m'

banner()  { echo -e "\n${CYAN}${BOLD}=== $* ===${NC}\n"; }
info()    { echo -e "${GREEN}[INFO]${NC}  $*"; }
warn()    { echo -e "${YELLOW}[WARN]${NC}  $*"; }
err()     { echo -e "${RED}[ERROR]${NC} $*"; }
ok()      { echo -e "${GREEN}[OK]${NC}    $*"; }

# --- Root check ---------------------------------------------------------------
if [[ $EUID -ne 0 ]]; then
    err "This script must be run as root (sudo)."
    exit 1
fi

# --- Interactive check --------------------------------------------------------
if [[ ! -t 0 ]]; then
    err "This script requires interactive input."
    err "Download it first, then run it:"
    err "  curl -fsSL <url> -o install.sh && chmod +x install.sh && sudo ./install.sh"
    exit 1
fi

# =============================================================================
# Paths
# =============================================================================
INSTALL_DIR="/opt/sqlbackup"
CONF_DIR="/etc/sqlbackup"
CONF_FILE="${CONF_DIR}/backup.conf"
LOG_DIR="/var/log/sqlbackup"
BACKUP_MOUNT="/mnt/sqlbackups"
SQLCMD="/opt/mssql-tools18/bin/sqlcmd"
CRON_FILE="/etc/cron.d/sqlbackup"
OLA_URL="https://raw.githubusercontent.com/olahallengren/sql-server-maintenance-solution/master/MaintenanceSolution.sql"
TEMP_DIR="$(mktemp -d /tmp/sqlbackup-install.XXXXXX)"

cleanup() { rm -rf "$TEMP_DIR"; }
trap cleanup EXIT

# =============================================================================
# Helper: prompt with default
# =============================================================================
prompt() {
    local var_name="$1" prompt_text="$2" default="${3:-}" is_secret="${4:-}"
    local value

    if [[ -n "$default" && -z "$is_secret" ]]; then
        read -rp "  $prompt_text [$default]: " value
        value="${value:-$default}"
    elif [[ -n "$is_secret" ]]; then
        read -rsp "  $prompt_text: " value
        echo
        if [[ -z "$value" ]]; then
            err "This field is required."
            read -rsp "  $prompt_text: " value
            echo
        fi
    else
        read -rp "  $prompt_text: " value
    fi

    if [[ -z "$value" && -z "$default" ]]; then
        err "This field is required."
        read -rp "  $prompt_text: " value
    fi

    printf -v "$var_name" '%s' "${value:-$default}"
}

prompt_yesno() {
    local prompt_text="$1" default="${2:-y}"
    local value
    read -rp "  $prompt_text [${default}]: " value
    value="${value:-$default}"
    [[ "$value" =~ ^[Yy] ]]
}

# =============================================================================
# Welcome
# =============================================================================
echo ""
echo -e "${CYAN}${BOLD}"
echo "  ╔═══════════════════════════════════════════════════════════╗"
echo "  ║       SQL Server Backup Automation - Installer           ║"
echo "  ║       Ola Hallengren + Encrypted Backups + Alerts        ║"
echo "  ╚═══════════════════════════════════════════════════════════╝"
echo -e "${NC}"
echo "  This script will:"
echo "    1. Install Ola Hallengren's Maintenance Solution"
echo "    2. Create a dedicated backup_admin SQL login"
echo "    3. Configure Database Mail for failure alerts"
echo "    4. Deploy backup/integrity-check scripts"
echo "    5. Create configuration and cron jobs"
echo ""
echo -e "  ${YELLOW}You will need: SA password, SMTP credentials, alert email${NC}"
echo ""

if ! prompt_yesno "Continue with installation?" "y"; then
    echo "Aborted."
    exit 0
fi

# =============================================================================
# Step 1: Prerequisites
# =============================================================================
banner "Step 1/7: Checking Prerequisites"

# sqlcmd
if [[ -x "$SQLCMD" ]]; then
    ok "sqlcmd found at $SQLCMD"
else
    err "sqlcmd not found at $SQLCMD"
    err "Install mssql-tools18 first:"
    err "  https://learn.microsoft.com/en-us/sql/linux/sql-server-linux-setup-tools"
    exit 1
fi

# curl
if command -v curl &>/dev/null; then
    ok "curl available"
else
    err "curl is required but not installed."
    exit 1
fi

# rsync (used to sync local backups to remote/network share)
if command -v rsync &>/dev/null; then
    ok "rsync available"
else
    info "rsync not found - installing..."
    if apt-get install -y rsync &>/dev/null 2>&1 || yum install -y rsync &>/dev/null 2>&1; then
        ok "rsync installed"
    else
        err "Failed to install rsync. Install it manually: apt install rsync"
        exit 1
    fi
fi

# Check SQL Server is running
if "$SQLCMD" -S localhost -Q "SELECT 1" -C -b &>/dev/null 2>&1; then
    ok "SQL Server is reachable on localhost"
else
    warn "Could not connect to SQL Server on localhost (may need credentials)"
fi

# =============================================================================
# Step 2: Gather Information
# =============================================================================
banner "Step 2/7: Configuration"

echo -e "  ${BOLD}SQL Server Connection${NC}"
prompt SA_PASSWORD    "SA password (for initial setup)" "" "secret"
prompt SQL_HOST       "SQL Server host"                 "localhost"

echo ""
echo -e "  ${BOLD}Backup Admin Login${NC} (will be created)"
prompt BACKUP_USER    "Backup SQL login name"           "backup_admin"
prompt BACKUP_PASS    "Backup SQL login password"       "" "secret"

echo ""
echo -e "  ${BOLD}Backup Storage${NC}"
prompt LOCAL_BACKUP_DIR  "Local backup directory"          "/sqlbackup"
prompt REMOTE_BACKUP_DIR "Remote/network backup directory" "$BACKUP_MOUNT"

echo ""
echo -e "  ${BOLD}Backup Schedule${NC}"
prompt FULL_BACKUP_HOUR "Full backup hour (0-23, 24h format)" "5"
prompt LOG_FREQ_MINUTES "Transaction log backup frequency in minutes (15/30/60)" "60"

# Validate full backup hour
if ! [[ "$FULL_BACKUP_HOUR" =~ ^[0-9]+$ ]] || [[ "$FULL_BACKUP_HOUR" -gt 23 ]]; then
    err "Invalid hour '$FULL_BACKUP_HOUR' - must be 0-23"
    exit 1
fi

# Validate log frequency
case "$LOG_FREQ_MINUTES" in
    15|30|60) ;;
    *)
        err "Invalid log frequency '$LOG_FREQ_MINUTES' - must be 15, 30, or 60"
        exit 1
        ;;
esac

echo ""
echo -e "  ${BOLD}SMTP / Email Alerts${NC}"
prompt SMTP_SERVER    "SMTP server"                     "smtp.example.com"
prompt SMTP_PORT      "SMTP port"                       "587"
prompt SMTP_USER      "SMTP username"                   ""
prompt SMTP_PASS      "SMTP password"                   "" "secret"
prompt SENDER_EMAIL   "Sender (From) email"             ""
prompt ALERT_EMAIL    "Alert recipient email"           ""

ENABLE_SSL=1
if ! prompt_yesno "Enable TLS/SSL for SMTP?" "y"; then
    ENABLE_SSL=0
fi

echo ""
echo -e "  ${BOLD}Mail Profile${NC}"
prompt MAIL_PROFILE   "Database Mail profile name"      "BackupAlerts"

# =============================================================================
# Step 3: Create Directories
# =============================================================================
banner "Step 3/7: Creating Directories"

for DIR in "$INSTALL_DIR" "$CONF_DIR" "$LOG_DIR"; do
    mkdir -p "$DIR"
    ok "Created $DIR"
done

# Local backup directory (where SQL Server writes backups)
mkdir -p "$LOCAL_BACKUP_DIR"
if id mssql &>/dev/null; then
    chown -R mssql:mssql "$LOCAL_BACKUP_DIR"
    chmod 0750 "$LOCAL_BACKUP_DIR"
    ok "Set $LOCAL_BACKUP_DIR ownership to mssql:mssql (0750)"
else
    warn "mssql user not found - set backup directory permissions manually"
fi

# Remote backup directory (network share for off-server copy)
if [[ -d "$REMOTE_BACKUP_DIR" ]]; then
    ok "$REMOTE_BACKUP_DIR already exists"
else
    warn "$REMOTE_BACKUP_DIR does not exist - ensure it is mounted before backups run"
fi

chmod 0700 "$CONF_DIR"

# =============================================================================
# Step 4: Install Ola Hallengren
# =============================================================================
banner "Step 4/7: Installing Ola Hallengren Maintenance Solution"

info "Downloading MaintenanceSolution.sql..."
if curl -fsSL "$OLA_URL" -o "${TEMP_DIR}/MaintenanceSolution.sql"; then
    ok "Downloaded MaintenanceSolution.sql"
else
    err "Failed to download Ola Hallengren's Maintenance Solution"
    err "URL: $OLA_URL"
    exit 1
fi

info "Installing into master database..."
if "$SQLCMD" -S "$SQL_HOST" -U SA -P "$SA_PASSWORD" -d master \
    -i "${TEMP_DIR}/MaintenanceSolution.sql" -b -C &>"${TEMP_DIR}/ola_install.log"; then
    ok "Ola Hallengren installed successfully"
else
    err "Failed to install Ola Hallengren. Log:"
    tail -20 "${TEMP_DIR}/ola_install.log"
    exit 1
fi

# Verify
info "Verifying installation..."
VERIFY_RESULT=$("$SQLCMD" -S "$SQL_HOST" -U SA -P "$SA_PASSWORD" -d master -C -h -1 -W -Q "
    SET NOCOUNT ON;
    SELECT CASE WHEN
        OBJECT_ID('dbo.DatabaseBackup','P') IS NOT NULL AND
        OBJECT_ID('dbo.DatabaseIntegrityCheck','P') IS NOT NULL AND
        OBJECT_ID('dbo.CommandLog','U') IS NOT NULL
    THEN 'PASS' ELSE 'FAIL' END;" 2>/dev/null | tr -d '[:space:]')

if [[ "$VERIFY_RESULT" == "PASS" ]]; then
    ok "Verified: DatabaseBackup, DatabaseIntegrityCheck, CommandLog all present"
else
    err "Verification failed - some Ola Hallengren objects are missing"
    exit 1
fi

# --- Auto-detect TDE certificate ----------------------------------------------
info "Detecting TDE certificate..."
CERT_NAME=$("$SQLCMD" -S "$SQL_HOST" -U SA -P "$SA_PASSWORD" -d master -C -h -1 -W -Q "
    SET NOCOUNT ON;
    SELECT TOP 1 c.name
    FROM sys.dm_database_encryption_keys dek
    JOIN sys.certificates c ON dek.encryptor_thumbprint = c.thumbprint
    WHERE dek.database_id > 4;" 2>/dev/null | tr -d '[:space:]') || true

if [[ -n "$CERT_NAME" ]]; then
    ok "TDE certificate detected: $CERT_NAME"
else
    warn "No TDE certificate found - backups will auto-detect at runtime"
    CERT_NAME=""
fi

# =============================================================================
# Step 5: Create backup_admin Login & Configure Database Mail
# =============================================================================
banner "Step 5/7: SQL Server Configuration"

# --- Create backup_admin login ------------------------------------------------
info "Creating SQL login '$BACKUP_USER'..."

# Escape single quotes in password for T-SQL
ESCAPED_BACKUP_PASS="${BACKUP_PASS//\'/\'\'}"

"$SQLCMD" -S "$SQL_HOST" -U SA -P "$SA_PASSWORD" -d master -b -C -Q "
    IF NOT EXISTS (SELECT 1 FROM sys.server_principals WHERE name = '$BACKUP_USER')
    BEGIN
        CREATE LOGIN [$BACKUP_USER] WITH PASSWORD = N'$ESCAPED_BACKUP_PASS', CHECK_POLICY = OFF;
        ALTER SERVER ROLE [sysadmin] ADD MEMBER [$BACKUP_USER];
        PRINT '[OK] Login $BACKUP_USER created with sysadmin role';
    END
    ELSE
    BEGIN
        PRINT '[OK] Login $BACKUP_USER already exists';
    END
" 2>&1 | grep -E '^\[' || true
ok "SQL login configured"

# --- Configure Database Mail --------------------------------------------------
info "Configuring Database Mail..."

ESCAPED_SMTP_PASS="${SMTP_PASS//\'/\'\'}"

cat > "${TEMP_DIR}/configure_mail.sql" << EOSQL
USE [msdb];
GO

EXEC sp_configure 'show advanced options', 1;
RECONFIGURE;
EXEC sp_configure 'Database Mail XPs', 1;
RECONFIGURE;

-- Drop existing profile/account if re-running
IF EXISTS (SELECT 1 FROM msdb.dbo.sysmail_profileaccount pa
           JOIN msdb.dbo.sysmail_profile p ON pa.profile_id = p.profile_id
           JOIN msdb.dbo.sysmail_account a ON pa.account_id = a.account_id
           WHERE p.name = N'${MAIL_PROFILE}' AND a.name = N'BackupSMTP')
BEGIN
    EXEC msdb.dbo.sysmail_delete_profileaccount_sp
        @profile_name = N'${MAIL_PROFILE}',
        @account_name = N'BackupSMTP';
END

IF EXISTS (SELECT 1 FROM msdb.dbo.sysmail_profile WHERE name = N'${MAIL_PROFILE}')
    EXEC msdb.dbo.sysmail_delete_profile_sp @profile_name = N'${MAIL_PROFILE}';

IF EXISTS (SELECT 1 FROM msdb.dbo.sysmail_account WHERE name = N'BackupSMTP')
    EXEC msdb.dbo.sysmail_delete_account_sp @account_name = N'BackupSMTP';

EXEC msdb.dbo.sysmail_add_account_sp
    @account_name   = N'BackupSMTP',
    @description    = N'SMTP account for SQL Server backup alerts',
    @email_address  = N'${SENDER_EMAIL}',
    @display_name   = N'SQL Backup Alerts',
    @mailserver_name = N'${SMTP_SERVER}',
    @port           = ${SMTP_PORT},
    @username       = N'${SMTP_USER}',
    @password       = N'${ESCAPED_SMTP_PASS}',
    @enable_ssl     = ${ENABLE_SSL};

EXEC msdb.dbo.sysmail_add_profile_sp
    @profile_name = N'${MAIL_PROFILE}',
    @description  = N'Profile for sending backup failure notifications';

EXEC msdb.dbo.sysmail_add_profileaccount_sp
    @profile_name    = N'${MAIL_PROFILE}',
    @account_name    = N'BackupSMTP',
    @sequence_number = 1;

EXEC msdb.dbo.sysmail_add_principalsecurity_sp
    @profile_name    = N'${MAIL_PROFILE}',
    @principal_name  = N'public',
    @is_default      = 1;

EXEC msdb.dbo.sp_send_dbmail
    @profile_name = N'${MAIL_PROFILE}',
    @recipients   = N'${ALERT_EMAIL}',
    @subject      = N'SQL Server Backup Alerts - Test Email',
    @body         = N'This is a test email from SQL Server Database Mail. If you received this, backup notifications are configured correctly.',
    @body_format  = N'TEXT';
GO
EOSQL

if "$SQLCMD" -S "$SQL_HOST" -U SA -P "$SA_PASSWORD" \
    -i "${TEMP_DIR}/configure_mail.sql" -b -C &>"${TEMP_DIR}/mail_setup.log"; then
    ok "Database Mail configured"
    info "Test email sent to $ALERT_EMAIL - check your inbox"
else
    warn "Database Mail configuration had errors (check ${TEMP_DIR}/mail_setup.log)"
    warn "You can re-configure manually later with 02_configure_database_mail.sql"
fi

# =============================================================================
# Step 6: Deploy Scripts & Configuration
# =============================================================================
banner "Step 6/7: Deploying Scripts"

# --- Download scripts from GitHub ---------------------------------------------
SCRIPTS_BASE_URL="https://raw.githubusercontent.com/MarkLFT/sql-server-linux-backups/master/scripts"

for SCRIPT_NAME in run_backup.sh 03_backup_full.sql 04_backup_log.sql 05_verify_setup.sql 06_checkdb.sql; do
    if curl -fsSL "${SCRIPTS_BASE_URL}/${SCRIPT_NAME}" -o "${INSTALL_DIR}/${SCRIPT_NAME}"; then
        ok "Downloaded $SCRIPT_NAME"
    else
        err "Failed to download $SCRIPT_NAME"
        exit 1
    fi
done

chmod +x "${INSTALL_DIR}/run_backup.sh"

# --- Write backup.conf -------------------------------------------------------
cat > "$CONF_FILE" << EOCONF
# SQL Server Backup Configuration
# Generated by install.sh on $(date '+%Y-%m-%d %H:%M:%S')

SQL_USER="${BACKUP_USER}"
SQL_PASSWORD="${BACKUP_PASS}"
SQL_HOST="${SQL_HOST}"

LOCAL_BACKUP_DIR="${LOCAL_BACKUP_DIR}"
REMOTE_BACKUP_DIR="${REMOTE_BACKUP_DIR}"

CERT_NAME="${CERT_NAME}"

MAIL_PROFILE="${MAIL_PROFILE}"
MAIL_RECIPIENTS="${ALERT_EMAIL}"
EOCONF

chmod 600 "$CONF_FILE"
ok "Created $CONF_FILE (mode 600)"

# =============================================================================
# Step 7: Cron Jobs
# =============================================================================
banner "Step 7/7: Installing Cron Jobs"

# Build cron schedule from user choices
# CHECKDB runs 2 hours before full backup on Wednesdays
CHECKDB_HOUR=$(( (FULL_BACKUP_HOUR + 22) % 24 ))  # full - 2, wrapping

# Build the log backup skip expression (skip the full backup hour)
if [[ "$LOG_FREQ_MINUTES" == "60" ]]; then
    # Hourly - skip the full backup hour
    if [[ "$FULL_BACKUP_HOUR" -eq 0 ]]; then
        LOG_SCHEDULE="0 1-23 * * *"
    elif [[ "$FULL_BACKUP_HOUR" -eq 23 ]]; then
        LOG_SCHEDULE="0 0-22 * * *"
    else
        LOG_SCHEDULE="0 0-$((FULL_BACKUP_HOUR - 1)),$((FULL_BACKUP_HOUR + 1))-23 * * *"
    fi
elif [[ "$LOG_FREQ_MINUTES" == "30" ]]; then
    LOG_SCHEDULE="0,30 * * * *"
elif [[ "$LOG_FREQ_MINUTES" == "15" ]]; then
    LOG_SCHEDULE="0,15,30,45 * * * *"
fi

cat > "$CRON_FILE" << CRONEOF
# SQL Server Backup Jobs - Managed by install.sh
SHELL=/bin/bash
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

# DBCC CHECKDB - Wednesday at ${CHECKDB_HOUR}:00 (before the full backup)
0 ${CHECKDB_HOUR} * * 3 root /opt/sqlbackup/run_backup.sh CHECKDB >> /var/log/sqlbackup/cron_checkdb.log 2>&1

# Full backup - Daily at ${FULL_BACKUP_HOUR}:00
0 ${FULL_BACKUP_HOUR} * * * root /opt/sqlbackup/run_backup.sh FULL >> /var/log/sqlbackup/cron_full.log 2>&1

# Transaction log backup - Every ${LOG_FREQ_MINUTES} minutes
${LOG_SCHEDULE} root /opt/sqlbackup/run_backup.sh LOG >> /var/log/sqlbackup/cron_log.log 2>&1
CRONEOF

chmod 644 "$CRON_FILE"
ok "Cron jobs installed to $CRON_FILE"

# =============================================================================
# Verification
# =============================================================================
banner "Running Verification"

info "Running 05_verify_setup.sql..."
echo ""
"$SQLCMD" -S "$SQL_HOST" -U "$BACKUP_USER" -P "$BACKUP_PASS" -d master \
    -i "${INSTALL_DIR}/05_verify_setup.sql" -C 2>&1 || {
    warn "Verification query had issues - review output above"
}

# =============================================================================
# Pre-create Backup Directories
# =============================================================================
# Ola Hallengren's DirectoryStructure = '{DatabaseName}/{BackupType}' expects
# subdirectories to already exist.  CIFS/SMB mounts do not allow SQL Server to
# create them on the fly, so we pre-create them here for all user databases.
info "Creating per-database backup directories..."
INSTALL_DB_LIST=$("$SQLCMD" -S "$SQL_HOST" -U "$BACKUP_USER" -P "$BACKUP_PASS" \
    -d master -h -1 -W -C \
    -Q "SET NOCOUNT ON; SELECT name FROM sys.databases WHERE database_id > 4 AND state = 0;" 2>/dev/null) || true

if [[ -n "$INSTALL_DB_LIST" ]]; then
    while IFS= read -r _DB; do
        _DB="$(echo "$_DB" | xargs)"
        [[ -z "$_DB" ]] && continue
        mkdir -p "${LOCAL_BACKUP_DIR}/${_DB}/FULL" "${LOCAL_BACKUP_DIR}/${_DB}/LOG"
    done <<< "$INSTALL_DB_LIST"
    ok "Created FULL and LOG directories for all user databases"
else
    warn "Could not query database list - backup directories will be created at first run"
fi

# =============================================================================
# Initial Full Backup
# =============================================================================
echo ""
echo -e "  ${YELLOW}${BOLD}A full backup must exist before transaction log backups can succeed.${NC}"
echo -e "  The first scheduled cron job is likely a log backup, which will fail"
echo -e "  without an existing full backup."
echo ""

if prompt_yesno "Run an initial full backup now?" "y"; then
    banner "Running Initial Full Backup"
    info "This may take a while depending on database sizes..."
    echo ""
    if "${INSTALL_DIR}/run_backup.sh" FULL; then
        ok "Initial full backup completed successfully"
    else
        warn "Full backup had errors - check ${LOG_DIR}/ for details"
        warn "You can retry manually:  sudo ${INSTALL_DIR}/run_backup.sh FULL"
    fi
else
    echo ""
    warn "Skipped. Run a full backup manually before the first scheduled log backup:"
    echo -e "    sudo ${INSTALL_DIR}/run_backup.sh FULL"
fi

# =============================================================================
# Summary
# =============================================================================
# Box-drawing helper: pads content to fixed width inside box borders
BOX_W=61  # inner width between the two ║ characters
box_top()    { echo -e "${CYAN}╔$(printf '═%.0s' $(seq 1 $BOX_W))╗${NC}"; }
box_bottom() { echo -e "${CYAN}╚$(printf '═%.0s' $(seq 1 $BOX_W))╝${NC}"; }
box_mid()    { echo -e "${CYAN}╠$(printf '═%.0s' $(seq 1 $BOX_W))╣${NC}"; }
box_blank()  { printf "${CYAN}║${NC}%-${BOX_W}s${CYAN}║${NC}\n" ""; }
box_line()   { printf "${CYAN}║${NC} %-$(( BOX_W - 2 ))s ${CYAN}║${NC}\n" "$1"; }
box_header() { printf "${CYAN}║${NC} ${BOLD}%-$(( BOX_W - 2 ))s${NC} ${CYAN}║${NC}\n" "$1"; }

echo ""
box_top
box_line ""
box_header "Installation Complete"
box_line ""
box_mid
box_blank
box_header "Installed Components"
box_line "  Scripts ........... ${INSTALL_DIR}/"
box_line "  Configuration ..... ${CONF_FILE}"
box_line "  Logs .............. ${LOG_DIR}/"
box_line "  Cron .............. ${CRON_FILE}"
box_line "  Local backups ..... ${LOCAL_BACKUP_DIR}"
box_line "  Remote sync ....... ${REMOTE_BACKUP_DIR}"
box_line "  TDE certificate ... ${CERT_NAME:-auto-detect}"
box_blank
box_header "Cron Schedule"
box_line "  CHECKDB ........... Wednesday $(printf '%02d' "$CHECKDB_HOUR"):00"
box_line "  FULL .............. Daily $(printf '%02d' "$FULL_BACKUP_HOUR"):00"
box_line "  LOG ............... Every ${LOG_FREQ_MINUTES} min"
box_blank
box_mid
box_blank
box_header "Manual Commands"
box_line "  sudo ${INSTALL_DIR}/run_backup.sh FULL"
box_line "  sudo ${INSTALL_DIR}/run_backup.sh LOG"
box_line "  sudo ${INSTALL_DIR}/run_backup.sh CHECKDB"
box_blank
box_bottom
echo ""

echo -e "${YELLOW}${BOLD}── Remote Backup Storage ──${NC}"
echo ""
echo -e "Backups are written to local disk (${BOLD}${LOCAL_BACKUP_DIR}${NC}) then synced"
echo -e "to the remote share (${BOLD}${REMOTE_BACKUP_DIR}${NC}) via rsync."
echo ""
echo -e "${BOLD}SMB/CIFS Mount:${NC}"
echo "  1. Install:     apt install cifs-utils  (or)  yum install cifs-utils"
echo "  2. Credentials: echo -e 'username=<smb_user>\npassword=<smb_pass>\ndomain=<domain>' > /etc/smbcredentials"
echo "                  chmod 600 /etc/smbcredentials"
echo "  3. fstab:       //<server>/<share>  ${REMOTE_BACKUP_DIR}  cifs  credentials=/etc/smbcredentials,uid=mssql,gid=mssql,file_mode=0770,dir_mode=0770,hard,nofail  0  0"
echo "  4. Mount:       mount ${REMOTE_BACKUP_DIR}"
echo ""
echo -e "${BOLD}NFS Mount:${NC}"
echo "  1. Install:     apt install nfs-common  (or)  yum install nfs-utils"
echo "  2. fstab:       <server>:/<export>  ${REMOTE_BACKUP_DIR}  nfs  defaults,nofail  0  0"
echo "  3. Mount:       mount ${REMOTE_BACKUP_DIR}"
echo "  4. Ensure the NFS export allows write access from the mssql uid/gid"
echo ""
echo -e "${YELLOW}Important:${NC} Mount the share ${BOLD}before${NC} the first scheduled backup."
echo ""

echo -e "This script is safe to re-run. It will update existing components without"
echo -e "duplicating SQL logins or mail profiles."
echo ""