docker-borgserver/data/run.sh

#!/bin/bash
# Init borg-users .ssh/authorized_keys

BORG_DATA_DIR=/backup
BORG_CMD='cd ${BORG_DATA_DIR}/${client_name}; borg serve --append-only --restrict-to-path ${BORG_DATA_DIR}/${client_name}'
SSH_KEY_DIR=/sshkeys

# add all sshkeys to borg-user's authorized_keys & create repositories
echo "########################################################"
for dir in BORG_DATA_DIR SSH_KEY_DIR ; do
	dirpath=$(eval echo '$'$dir)
	echo " * Testing Volume $dir: $dirpath"
	if [ ! -d "$dirpath" ] ; then
		echo "ERROR: $dirpath is no directory!"
		exit 1
	fi

	if [ $(find "${SSH_KEY_DIR}/clients" -type f | wc -l) == 0 ] ; then
		echo "ERROR: No SSH-Pubkey file found in $SSH_KEY_DIR"
		exit 1
	fi
done

# (Create &) Copy SSH-Host-Keys to persistent storage
mkdir -p ${SSH_KEY_DIR}/host 2>/dev/null
echo " * Checking / Preparing SSH Host-Keys..."

if [ ! -f /etc/ssh/ssh_host_rsa_key ] ; then
	echo "  ** Creating SSH Hostkeys..."
	for keytype in ed25519 rsa ; do
		ssh-keygen -q -f "/etc/ssh/ssh_host_${keytype}_key" -N '' -t $keytype
	done
fi

for keyfile in ssh_host_rsa_key ssh_host_ed25519_key ; do
	if [ ! -f "${SSH_KEY_DIR}/host/${keyfile}" ] ; then
		cp /etc/ssh/${keyfile} "${SSH_KEY_DIR}/host/${keyfile}"
	fi
done
echo "########################################################"

echo " * Starting SSH-Key import..."
for keyfile in $(find "${SSH_KEY_DIR}/clients" -type f); do
    client_name=$(basename $keyfile)
    echo "  ** Adding client ${client_name} with repo path ${BORG_DATA_DIR}/${client_name}"
    mkdir ${BORG_DATA_DIR}/${client_name} 2>/dev/null
    echo -n "command=\"$(eval echo -n \"${BORG_CMD}\")\" " >> /home/borg/.ssh/authorized_keys
	cat $keyfile >> /home/borg/.ssh/authorized_keys
done

chown -R borg: /backup
chown borg: /home/borg/.ssh/authorized_keys
chmod 600 /home/borg/.ssh/authorized_keys

echo " * Init done!"
echo "########################################################"
echo " * Starting SSH-Daemon"

/usr/sbin/sshd -D -e