1-Stream Panel Database Migration

cat > /root/xm-backup.sh <<'XMEOF'
#!/bin/bash
# Xtream-Masters - 1-Stream backup helper.
# Reads your panel's own config, so there is nothing to fill in by hand.
# Re-run with:  bash /root/xm-backup.sh --reset-password
set -u

say()  { printf '%s\n' "$*"; }
die()  { printf '\n [X] %s\n\n' "$*" >&2; exit 1; }

[ "$(id -u)" = "0" ] || die "Run this as root."
command -v pg_dump >/dev/null 2>&1 || die "pg_dump is not installed on this server."

RESET=0
[ "${1:-}" = "--reset-password" ] && RESET=1

# ---- 1. find the panel config -------------------------------------------
CFG=""
for f in /home/onestream/iptv/config.php /home/onestream/iptv/config.php.backup \
         /home/onestream/config.php /home/onestream/config.php.backup; do
    [ -f "$f" ] && CFG="$f" && break
done
[ -n "$CFG" ] || CFG=$(find /home/onestream -maxdepth 4 -name 'config.php' 2>/dev/null | head -1)
[ -n "$CFG" ] || die "Could not find your 1-Stream config.php."

val() { sed -n "s/.*'$1'[[:space:]]*=>[[:space:]]*[\"']\{0,1\}\([^\"',]*\).*/\1/p" "$CFG" | head -1; }
DBH=$(val db_host); DBP=$(val db_port); DBN=$(val db_database)
DBU=$(val db_username); DBW=$(val db_password)
[ -n "$DBH" ] || DBH=127.0.0.1
[ -n "$DBP" ] || DBP=5272
[ -n "$DBU" ] || DBU=streaming
[ -n "$DBN" ] || die "Could not read the database name from $CFG"
say " [1/5] config  : $CFG"
say "       database: $DBU@$DBH:$DBP/$DBN"

# ---- 2. optional password reset -----------------------------------------
# Only runs when asked for. The new password is written back into the config
# in the same step, otherwise the panel itself would stop connecting.
if [ "$RESET" = "1" ]; then
    NEWPW=$(head -c 12 /dev/urandom | od -An -tx1 | tr -d ' \n')
    say " [*] resetting the database password"
    sudo -u postgres psql -p "$DBP" -c "ALTER USER \"$DBU\" WITH PASSWORD '$NEWPW';" >/dev/null 2>&1 \
        || die "Reset failed. Run it by hand:
       sudo -u postgres psql -p $DBP -c \"ALTER USER $DBU WITH PASSWORD 'yourpass';\""
    for f in /home/onestream/iptv/config.php /home/onestream/iptv/config.php.backup; do
        [ -f "$f" ] || continue
        cp -a "$f" "/root/xm-config-backup-$(basename "$f")-$(date +%Y%m%d%H%M%S)"
        sed -i "s|'db_password'[[:space:]]*=>.*|'db_password' => \"$NEWPW\",|" "$f"
        say "     updated $f"
    done
    DBW="$NEWPW"
    say "     new password: $NEWPW"
fi

# ---- 3. connect ----------------------------------------------------------
# Two ways in, so a stale password in the config is not a dead end: the normal
# TCP login, then the local postgres system account, which needs no password.
MODE=""
export PGPASSWORD="$DBW"
if psql -h "$DBH" -p "$DBP" -U "$DBU" -d "$DBN" -tAc 'SELECT 1' >/dev/null 2>&1; then
    MODE=tcp
elif sudo -u postgres psql -p "$DBP" -d "$DBN" -tAc 'SELECT 1' >/dev/null 2>&1; then
    MODE=peer
    say " [!] the password in your config did not work - using the local"
    say "     postgres account instead (no password needed)"
fi

if [ -z "$MODE" ]; then
    say ""
    say " [X] Could not log in to the database."
    say ""
    say "     Reset the password and retry, both in one go:"
    say ""
    say "         bash /root/xm-backup.sh --reset-password"
    say ""
    die "Nothing has been changed."
fi
say " [2/5] connected via $MODE"

# ---- 4. dump -------------------------------------------------------------
OUTDIR=""
for d in /home/onestream/iptv/public /home/onestream/public /var/www/html /usr/share/nginx/html; do
    [ -d "$d" ] && OUTDIR="$d" && break
done
[ -n "$OUTDIR" ] || die "Could not find your public web folder."

# Random name: this file holds your whole customer database and sits in a
# public folder until you delete it, so it should not be guessable.
TOKEN=$(head -c 9 /dev/urandom | od -An -tx1 | tr -d ' \n')
OUT="$OUTDIR/xm-$TOKEN.sql"

say " [3/5] writing  : $OUT"
say "       this can take a few minutes on a large panel, please wait"

DUMP_ARGS="--quote-all-identifiers --no-acl --no-owner \
    --exclude-table=api_access_tokens \
    --exclude-table=automated_subsription_messages \
    --exclude-table=automated_subsription_messages_types \
    --exclude-table=auto_block_restrictions \
    --exclude-table=auto_block_settings \
    --exclude-table=contacts \
    --exclude-table=credits_history_reasons \
    --exclude-table=dashboard_messages \
    --exclude-table=dashboard_messages_roles \
    --exclude-table=device_events \
    --exclude-table=epg_data \
    --exclude-table=external_servers \
    --exclude-table=external_servers_status \
    --exclude-table=file_data_imports \
    --exclude-table=file_data_import_records \
    --exclude-table=general_security_restrictions \
    --exclude-table=general_security_restriction_reasons \
    --exclude-table=general_security_restriction_scopes \
    --exclude-table=general_security_restriction_types \
    --exclude-table=general_security_whitelists \
    --exclude-table=integration_transactions \
    --exclude-table=ip_to_location \
    --exclude-table=lines_proxies \
    --exclude-table=lines_proxy_groups \
    --exclude-table=lines_proxy_group_detection \
    --exclude-table=line_activity \
    --exclude-table=line_connection_stats \
    --exclude-table=line_restriction_types \
    --exclude-table=migrations \
    --exclude-table=migration_history \
    --exclude-table=migration_logs \
    --exclude-table=notices \
    --exclude-table=notices_notice_integrations \
    --exclude-table=notice_channels \
    --exclude-table=notice_channels_integrations \
    --exclude-table=notice_channel_types \
    --exclude-table=notice_integration \
    --exclude-table=notice_integration_types"

if [ "$MODE" = "tcp" ]; then
    # shellcheck disable=SC2086
    pg_dump -h "$DBH" -p "$DBP" -U "$DBU" -d "$DBN" $DUMP_ARGS -f "$OUT" || die "pg_dump failed."
else
    # shellcheck disable=SC2086
    sudo -u postgres pg_dump -p "$DBP" -d "$DBN" $DUMP_ARGS > "$OUT" || die "pg_dump failed."
fi

# ---- 5. verify -----------------------------------------------------------
[ -s "$OUT" ] || die "The backup came out empty."
tail -c 400 "$OUT" | grep -q 'PostgreSQL database dump complete' \
    || die "The backup is incomplete - it stopped early. Check free disk space with 'df -h' and run this again."
chmod 644 "$OUT"

SIZE=$(du -h "$OUT" | cut -f1)
IP=$(curl -fsS -m 8 https://api.ipify.org 2>/dev/null)
[ -n "$IP" ] || IP=$(hostname -I 2>/dev/null | awk '{print $1}')
[ -n "$IP" ] || IP="your-server-ip"

say " [4/5] verified : complete dump, $SIZE"
say " [5/5] done"
say ""
say " ============================================================"
say "  Paste this link into your order page:"
say ""
say "    http://$IP/xm-$TOKEN.sql"
say ""
say "  Delete it once your migration has finished:"
say "    rm -f $OUT"
say " ============================================================"
XMEOF
bash /root/xm-backup.sh