.gitignore

 Conflicts:

	.env

	.github/workflows/publish.yml

	.gitmodules

	Dockerfile

	app/controllers/api/projects.php

	composer.json

	composer.lock

	docker-compose.yml

	src/Appwrite/Platform/Tasks/Install.php

.env

@@ -26,6 +26,16 @@ _APP_DB_SCHEMA=appwrite
 _APP_DB_USER=user
 _APP_DB_PASS=password
 _APP_DB_ROOT_PASS=rootsecretpassword
+_APP_CONNECTIONS_MAX=3100
+_APP_POOL_CLIENTS=14
+_APP_CONNECTIONS_DB_REPLICAS=db_fra1_03=mariadb://root:rootsecretpassword@mariadb:3306/appwrite
+_APP_CONNECTIONS_DB_PROJECT=db_fra1_02=mariadb://user:password@mariadb:3306/appwrite
+_APP_CONNECTIONS_DB_CONSOLE=db_fra1_01=mariadb://user:password@mariadb:3306/appwrite
+_APP_CONNECTIONS_CACHE=redis_fra1_01=redis://redis:6379
+_APP_CONNECTIONS_QUEUE=redis_fra1_01=redis://redis:6379
+_APP_CONNECTIONS_PUBSUB=redis_fra1_01=redis://redis:6379
+_APP_CONNECTIONS_STORAGE=local://localhost
+_APP_CONNECTIONS_BACKUPS_STORAGE=dospaces://ACCESS:SECRET@default/backups-v1?region=fra1
 _APP_STORAGE_DEVICE=Local
 _APP_STORAGE_S3_ACCESS_KEY=
 _APP_STORAGE_S3_SECRET=

.gitignore

@@ -12,4 +12,4 @@
 debug/
 app/sdks
 dev/yasd_init.php
-.phpunit.result.cache
+.phpunit.result.cache

Dockerfile

@@ -74,6 +74,9 @@ RUN mkdir -p /storage/uploads && \
 # Executables
 RUN chmod +x /usr/local/bin/doctor && \
     chmod +x /usr/local/bin/maintenance &&  \
+    chmod +x /usr/local/bin/db-backup &&  \
+    chmod +x /usr/local/bin/db-restore &&  \
+    chmod +x /usr/local/bin/volume-sync && \
     chmod +x /usr/local/bin/usage && \
     chmod +x /usr/local/bin/install && \
     chmod +x /usr/local/bin/upgrade && \
@@ -119,6 +122,12 @@ RUN echo "default_socket_timeout=-1" >> /usr/local/etc/php/conf.d/appwrite.ini
 RUN echo "opcache.jit_buffer_size=100M" >> /usr/local/etc/php/conf.d/appwrite.ini
 RUN echo "opcache.jit=1235" >> /usr/local/etc/php/conf.d/appwrite.ini
 
+RUN \
+  apk update \
+  && apk add --no-cache \
+  docker \
+  && rm -rf /var/cache/apk/*
+
 EXPOSE 80
 
 CMD [ "php", "app/http.php", "-dopcache.preload=opcache.preload=/usr/src/code/app/preload.php" ]

app/init.php

@@ -618,6 +618,12 @@ $register->set('pools', function () {
             'multiple' => true,
             'schemes' => ['mariadb', 'mysql'],
         ],
+        'replica' => [
+            'type' => 'database',
+            'dsns' => App::getEnv('_APP_CONNECTIONS_DB_REPLICAS', $fallbackForDB),
+            'multiple' => true,
+            'schemes' => ['mariadb', 'mysql'],
+        ],
         'queue' => [
             'type' => 'queue',
             'dsns' => App::getEnv('_APP_CONNECTIONS_QUEUE', $fallbackForRedis),

bin/db-backup

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+php /usr/src/code/app/cli.php backup $@

bin/db-restore

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+php /usr/src/code/app/cli.php restore $@

composer.json

@@ -64,7 +64,7 @@
         "utopia-php/preloader": "0.2.*",
         "utopia-php/queue": "0.5.*",
         "utopia-php/registry": "0.5.*",
-        "utopia-php/storage": "0.17.*",
+        "utopia-php/storage": "dev-s3-getfiles as 0.16.0",
         "utopia-php/swoole": "0.5.*",
         "utopia-php/vcs": "0.5.*",
         "utopia-php/websocket": "0.1.*",

composer.lock

@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "13a3bdc7c1dec5756bf58ec73a49753d",
+    "content-hash": "f97d60b77dae0ce5fd9b57903cdebe55",
     "packages": [
         {
             "name": "adhocore/jwt",
@@ -1050,16 +1050,16 @@
         },
         {
             "name": "matomo/device-detector",
-            "version": "6.1.5",
+            "version": "6.1.6",
             "source": {
                 "type": "git",
                 "url": "https://github.com/matomo-org/device-detector.git",
-                "reference": "40ca2990dba2c1719e5c62168e822e0b86c167d4"
+                "reference": "5cbea85106e561c7138d03603eb6e05128480409"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/matomo-org/device-detector/zipball/40ca2990dba2c1719e5c62168e822e0b86c167d4",
-                "reference": "40ca2990dba2c1719e5c62168e822e0b86c167d4",
+                "url": "https://api.github.com/repos/matomo-org/device-detector/zipball/5cbea85106e561c7138d03603eb6e05128480409",
+                "reference": "5cbea85106e561c7138d03603eb6e05128480409",
                 "shasum": ""
             },
             "require": {
@@ -1115,7 +1115,7 @@
                 "source": "https://github.com/matomo-org/matomo",
                 "wiki": "https://dev.matomo.org/"
             },
-            "time": "2023-08-17T16:17:41+00:00"
+            "time": "2023-10-02T10:01:54+00:00"
         },
         {
             "name": "mongodb/mongodb",
@@ -2152,16 +2152,16 @@
         },
         {
             "name": "utopia-php/database",
-            "version": "0.43.4",
+            "version": "0.43.5",
             "source": {
                 "type": "git",
                 "url": "https://github.com/utopia-php/database.git",
-                "reference": "cabdd02e8dc1732eb0b22007c511e7bb3caa5c8c"
+                "reference": "5f7b05189cfbcc0506090498c580c5765375a00a"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/utopia-php/database/zipball/cabdd02e8dc1732eb0b22007c511e7bb3caa5c8c",
-                "reference": "cabdd02e8dc1732eb0b22007c511e7bb3caa5c8c",
+                "url": "https://api.github.com/repos/utopia-php/database/zipball/5f7b05189cfbcc0506090498c580c5765375a00a",
+                "reference": "5f7b05189cfbcc0506090498c580c5765375a00a",
                 "shasum": ""
             },
             "require": {
@@ -2202,9 +2202,9 @@
             ],
             "support": {
                 "issues": "https://github.com/utopia-php/database/issues",
-                "source": "https://github.com/utopia-php/database/tree/0.43.4"
+                "source": "https://github.com/utopia-php/database/tree/0.43.5"
             },
-            "time": "2023-09-28T09:00:05+00:00"
+            "time": "2023-10-06T06:49:47+00:00"
         },
         {
             "name": "utopia-php/domains",
@@ -2988,16 +2988,16 @@
         },
         {
             "name": "utopia-php/storage",
-            "version": "0.17.0",
+            "version": "dev-s3-getfiles",
             "source": {
                 "type": "git",
                 "url": "https://github.com/utopia-php/storage.git",
-                "reference": "efec5376c02d3d8330f1beb1469e6d6e313e21ee"
+                "reference": "0bd69e11152029e1a3bdb83264d174304d78fde7"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/utopia-php/storage/zipball/efec5376c02d3d8330f1beb1469e6d6e313e21ee",
-                "reference": "efec5376c02d3d8330f1beb1469e6d6e313e21ee",
+                "url": "https://api.github.com/repos/utopia-php/storage/zipball/0bd69e11152029e1a3bdb83264d174304d78fde7",
+                "reference": "0bd69e11152029e1a3bdb83264d174304d78fde7",
                 "shasum": ""
             },
             "require": {
@@ -3037,9 +3037,9 @@
             ],
             "support": {
                 "issues": "https://github.com/utopia-php/storage/issues",
-                "source": "https://github.com/utopia-php/storage/tree/0.17.0"
+                "source": "https://github.com/utopia-php/storage/tree/s3-getfiles"
             },
-            "time": "2023-08-21T11:28:36+00:00"
+            "time": "2023-10-12T09:14:45+00:00"
         },
         {
             "name": "utopia-php/swoole",
@@ -5993,9 +5993,18 @@
             "time": "2023-08-28T11:09:02+00:00"
         }
     ],
-    "aliases": [],
+    "aliases": [
+        {
+            "package": "utopia-php/storage",
+            "version": "dev-s3-getfiles",
+            "alias": "0.16.0",
+            "alias_normalized": "0.16.0.0"
+        }
+    ],
     "minimum-stability": "stable",
-    "stability-flags": [],
+    "stability-flags": {
+        "utopia-php/storage": 20
+    },
     "prefer-stable": false,
     "prefer-lowest": false,
     "platform": {
@@ -6019,5 +6028,5 @@
     "platform-overrides": {
         "php": "8.0"
     },
-    "plugin-api-version": "2.3.0"
+    "plugin-api-version": "2.2.0"
 }

docker-compose.yml

@@ -121,6 +121,14 @@ services:
       - _APP_DB_SCHEMA
       - _APP_DB_USER
       - _APP_DB_PASS
+      - _APP_CONNECTIONS_MAX
+      - _APP_POOL_CLIENTS
+      - _APP_CONNECTIONS_DB_PROJECT
+      - _APP_CONNECTIONS_DB_REPLICAS
+      - _APP_CONNECTIONS_DB_CONSOLE
+      - _APP_CONNECTIONS_CACHE
+      - _APP_CONNECTIONS_QUEUE
+      - _APP_CONNECTIONS_PUBSUB
       - _APP_SMTP_HOST
       - _APP_SMTP_PORT
       - _APP_SMTP_SECURE
@@ -790,7 +798,7 @@ services:
       - OPR_PROXY_HEALTHCHECK=enabled
 
   mariadb:
-    image: mariadb:10.7 # fix issues when upgrading using: mysql_upgrade -u root -p
+    image: mysql:8.0.33 # fix issues when upgrading using: mysql_upgrade -u root -p
     container_name: appwrite-mariadb
     <<: *x-logging
     networks:
@@ -819,6 +827,55 @@ services:
   #     - SMARTHOST_HOST=smtp
   #     - SMARTHOST_PORT=587
 
+  xtrabackup:
+    image: percona/percona-xtrabackup:8.0.33
+    container_name: xtrabackup
+    command: sleep infinity
+    volumes:
+      - backup-data:/backups:rw
+      - appwrite-mariadb:/var/lib/mysql:r
+    networks:
+      - appwrite
+    user: 'root:root'
+
+  appwrite-backup:
+    image: appwrite-dev
+    <<: *x-logging
+    entrypoint: db-backup
+    command:
+      - --database=db_fra1_03
+    container_name: appwrite-backup
+    networks:
+      - appwrite
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ./app:/usr/src/code/app
+      - ./src:/usr/src/code/src
+      - backup-data:/backups:rw
+    depends_on:
+      - redis
+    environment:
+      - _APP_CONNECTIONS_DB_REPLICAS
+      - _APP_CONNECTIONS_BACKUPS_STORAGE
+
+  appwrite-restore:
+    command: sleep infinity
+    container_name: appwrite-backup-restore
+    image: appwrite-dev
+    networks:
+      - appwrite
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ./app:/usr/src/code/app
+      - ./src:/usr/src/code/src
+      - backup-data:/backups:rw
+      - appwrite-mariadb:/var/lib/mysql:rw
+    depends_on:
+      - redis
+    environment:
+      - _APP_CONNECTIONS_DB_REPLICAS
+      - _APP_CONNECTIONS_BACKUPS_STORAGE
+
   redis:
     image: redis:7.0.4-alpine
     <<: *x-logging
@@ -984,4 +1041,5 @@ volumes:
   appwrite-builds:
   appwrite-influxdb:
   appwrite-config:
+  backup-data:
   # appwrite-chronograf:

src/Appwrite/Platform/Services/Tasks.php

@@ -2,6 +2,8 @@
 
 namespace Appwrite\Platform\Services;
 
+use Appwrite\Platform\Tasks\Backup;
+use Appwrite\Platform\Tasks\Restore;
 use Utopia\Platform\Service;
 use Appwrite\Platform\Tasks\Doctor;
 use Appwrite\Platform\Tasks\Install;
@@ -50,6 +52,8 @@ class Tasks extends Service
             ->addAction(CalcUsersStats::getName(), new CalcUsersStats())
             ->addAction(CalcTierStats::getName(), new CalcTierStats())
             ->addAction(PatchDeleteProjectCollections::getName(), new PatchDeleteProjectCollections())
+            ->addAction(Backup::getName(), new Backup())
+            ->addAction(Restore::getName(), new Restore())
         ;
     }
 }

src/Appwrite/Platform/Tasks/Backup.php

@@ -0,0 +1,415 @@
+<?php
+
+namespace Appwrite\Platform\Tasks;
+
+use Exception;
+use Utopia\DSN\DSN;
+use Utopia\Platform\Action;
+use Utopia\App;
+use Utopia\CLI\Console;
+use Utopia\Pools\Group;
+use Utopia\Storage\Device;
+use Utopia\Storage\Device\DOSpaces;
+use Utopia\Storage\Device\Local;
+use Utopia\Validator\Text;
+
+class Backup extends Action
+{
+    public const BACKUPS_PATH = '/backups';
+    public const BACKUP_INTERVAL_SECONDS = 60 * 60 * 4; // 4 hours;
+    public const COMPRESS_ALGORITHM = 'zstd'; // https://www.percona.com/blog/get-your-backup-to-half-of-its-size-introducing-zstd-support-in-percona-xtrabackup/
+    public const CLEANUP_LOCAL_FILES_SECONDS = 60 * 60 * 24 * 30; // 2 days?
+    public const CLEANUP_CLOUD_FILES_SECONDS = 60 * 60 * 24 * 30; // 14 days?;
+    public const UPLOAD_CHUNK_SIZE = 5 * 1024 * 1024; // Must be greater than 5MB;
+    public const RETRY_BACKUP = 1;
+    public const RETRY_TAR = 1;
+    public const RETRY_UPLOAD = 2;
+    public const VERSION = 'v1';
+    protected ?DSN $dsn = null;
+    protected ?string $database = null;
+    protected ?DOSpaces $s3 = null;
+    protected string $xtrabackupContainerId;
+    protected int $processors = 1;
+
+    /**
+     * @throws Exception
+     */
+    public function __construct()
+    {
+        $this
+            ->desc('Backup a database')
+            ->param('database', null, new Text(20), 'Database name, for example db_fra1_01')
+            ->inject('pools')
+            ->callback(fn(string $database, Group $pools) => $this->action($database, $pools));
+    }
+
+    public static function getName(): string
+    {
+        return 'backup';
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function action(string $database, Group $pools): void
+    {
+        $this->checkEnvVariables();
+
+        $this->database = $database;
+        $this->dsn = $this->getDsn($database);
+        if (is_null($this->dsn)) {
+            throw new Exception('No DSN match');
+        }
+
+        //todo: remove this:
+        console::info('Trying to connect to ' . $this->dsn->getHost() . ' : ' . $this->dsn->getPort() . ' user: ' . $this->dsn->getUser() . ' password: ' . $this->dsn->getPassword());
+
+        $dsn = new DSN(App::getEnv('_APP_CONNECTIONS_BACKUPS_STORAGE', ''));
+        $this->s3 = new DOSpaces('/' . $database . '/' . self::VERSION, $dsn->getUser(), $dsn->getPassword(), $dsn->getPath(), $dsn->getParam('region'));
+
+        try {
+            $this->retry(function () use ($pools, $database) {
+                $pools
+                ->get('replica_' . $database)
+                ->pop()
+                ->getResource();
+            }, 10, 5);
+        } catch (Exception $e) {
+            throw new Exception('Failed to connect to database: ' . $e->getMessage());
+        }
+
+        $this->setContainerId();
+        $this->setProcessors();
+
+        Console::loop(function () {
+            try {
+                $this->start();
+            } catch (Exception $e) {
+                //todo: send alerts sentry?
+                Console::error(date('Y-m-d H:i:s') . ' Error: ' . $e->getMessage());
+            }
+        }, self::BACKUP_INTERVAL_SECONDS);
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function start(): void
+    {
+        $start = microtime(true);
+        $time = date('Y_m_d_H_i_s');
+
+        self::log('--- Backup Start ' . $time . ' --- ');
+
+        $path = self::BACKUPS_PATH . '/' . $this->database . '/' . self::VERSION;
+        $local = new Local($path . '/' . $time);
+        $local->setTransferChunkSize(self::UPLOAD_CHUNK_SIZE);
+
+        $tarFile = $local->getPath($time . '.tar.gz');
+        $backups = $local->getRoot() . '/files';
+
+        $this->backup($backups);
+        $this->tar($backups, $tarFile);
+        $this->upload($tarFile, $local);
+
+        if (!unlink($tarFile)) {
+            Console::error('Error deleting: ' . $tarFile);
+        }
+
+        $this->cleanLocalFiles($path);
+        $this->cleanCloudFiles();
+
+        self::log('--- Backup Finish ' . (microtime(true) - $start) . ' seconds --- '   . PHP_EOL . PHP_EOL);
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function backup(string $target)
+    {
+        self::log('Xtrabackup start');
+
+        $start = microtime(true);
+
+        if (!file_exists(self::BACKUPS_PATH)) {
+            throw new Exception('Mount directory does not exist');
+        }
+
+        if (!file_exists($target) && !mkdir($target, 0755, true)) {
+            throw new Exception('Error creating directory: ' . $target);
+        }
+
+        $filename = basename($target);
+        $logfile = $target . '/../backup.log';
+
+        $args = [
+            'xtrabackup',
+            '--user=' . $this->dsn->getUser(),
+            '--password=' . $this->dsn->getPassword(),
+            '--host=' . $this->dsn->getHost(),
+            '--port=' . $this->dsn->getPort(),
+            '--backup',
+            '--strict',
+            '--history="' . $this->database . '|' . pathinfo($filename, PATHINFO_FILENAME) . '"', // PERCONA_SCHEMA.xtrabackup_history
+            '--slave-info',
+            '--safe-slave-backup',
+            '--safe-slave-backup-timeout=300',
+            '--check-privileges', // checks if Percona XtraBackup has all the required privileges.
+            '--target-dir=' . $target,
+            '--compress=' . self::COMPRESS_ALGORITHM,
+            '--compress-threads=' . $this->processors,
+            '--parallel=' . $this->processors,
+            '2> ' . $logfile,
+        ];
+
+        $this->retry(function () use ($args, $logfile, $target) {
+            shell_exec('docker exec ' . $this->xtrabackupContainerId . ' ' . implode(' ', $args));
+            $stderr = shell_exec('tail -1 ' . $logfile);
+            if (!str_contains($stderr, 'completed OK!')) {
+                shell_exec('rm -rf ' . $target . '/*');
+                throw new Exception(' Backup failed: ' . $stderr);
+            }
+        }, self::RETRY_BACKUP);
+
+        if (!unlink($logfile)) {
+            throw new Exception('Error deleting: ' . $logfile);
+        }
+
+        self::log('Xtrabackup Finish ' . (microtime(true) - $start) . ' seconds');
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function tar(string $directory, string $file)
+    {
+        self::log('Tar start');
+        $start = microtime(true);
+
+        $this->retry(function () use ($directory, $file) {
+            $stdout = '';
+            $stderr = '';
+            $cmd = 'cd ' . $directory . ' && tar -zcf ' . $file . ' . && cd ' . getcwd();
+            Console::execute($cmd, '', $stdout, $stderr);
+            if (!empty($stderr)) {
+                throw new Exception($stderr);
+            }
+        }, self::RETRY_TAR);
+
+        if (!file_exists($file)) {
+            throw new Exception('Tar file not found: ' . $file);
+        }
+
+        self::log('Tar finish ' . (microtime(true) - $start) . ' seconds');
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function upload(string $file, Device $local)
+    {
+        $start = microtime(true);
+        self::log('Upload start');
+        $filename = basename($file);
+
+        if (!$this->s3->exists('/')) {
+            throw new Exception('Can\'t read s3 root directory');
+        }
+
+        $destination = $this->s3->getRoot() . '/' . $filename;
+
+        $this->retry(function () use ($local, $file, $destination) {
+            if (!$local->transfer($file, $destination, $this->s3)) {
+                throw new Exception('Error uploading to ' . $destination);
+            }
+        }, self::RETRY_UPLOAD);
+
+        if (!$this->s3->exists($destination)) {
+            throw new Exception('File not found on cloud: ' . $destination);
+        }
+
+        self::log('Upload finish ' . (microtime(true) - $start) . ' seconds');
+    }
+
+    public static function log(string $message): void
+    {
+        if (!empty($message)) {
+            Console::log(date('Y-m-d H:i:s') . ' ' . $message);
+        }
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function checkEnvVariables(): void
+    {
+        foreach (
+            [
+                '_APP_CONNECTIONS_BACKUPS_STORAGE',
+                '_APP_CONNECTIONS_DB_REPLICAS',
+            ] as $env
+        ) {
+            if (empty(App::getEnv($env))) {
+                throw new Exception('Can\'t read ' . $env);
+            }
+        }
+    }
+
+    public function getDsn(string $database): ?DSN
+    {
+        foreach (explode(',', App::getEnv('_APP_CONNECTIONS_DB_REPLICAS', '')) as $project) {
+            [$db, $dsn] = explode('=', $project);
+            if ($db === $database) {
+                return new DSN($dsn);
+            }
+        }
+        return null;
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function setContainerId()
+    {
+        $stdout = '';
+        $stderr = '';
+        Console::execute('docker ps -f "name=xtrabackup" --format "{{.ID}}"', '', $stdout, $stderr);
+        if (!empty($stderr)) {
+            throw new Exception('Error setting container Id: ' . $stderr);
+        }
+
+        $containerId = str_replace(PHP_EOL, '', $stdout);
+        if (empty($containerId)) {
+            throw new Exception('Xtrabackup Container ID not found');
+        }
+
+        $this->xtrabackupContainerId = $containerId;
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function setProcessors()
+    {
+        $stdout = '';
+        $stderr = '';
+        Console::execute('docker exec ' . $this->xtrabackupContainerId . ' nproc', '', $stdout, $stderr);
+        if (!empty($stderr)) {
+            throw new Exception('Error setting processors: ' . $stderr);
+        }
+
+        $processors = str_replace(PHP_EOL, '', $stdout);
+        $processors = empty($processors) ? 1 : intval($processors);
+
+        //$this->processors = \max(1, $processors - 2);
+        // todo: Using all processors was with no errors
+        $this->processors = $processors;
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function retry(callable $action, int $retries, int $sleep = 1)
+    {
+        try {
+            return $action();
+        } catch (Exception $e) {
+            if ($retries > 0) {
+                Console::warning('Retrying (' . $retries . ') ' . $e->getMessage());
+                sleep($sleep);
+                return $this->retry($action, $retries - 1, $sleep);
+            } else {
+                throw $e;
+            }
+        }
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function cleanLocalFiles(string $path)
+    {
+        self::log('Clean local start');
+
+        $start = microtime(true);
+
+        $folder = scandir($path);
+        if ($folder === false) {
+            throw new Exception('Scan directory error ' . $path);
+        }
+
+        foreach ($folder as $item) {
+            $filename = $item . '.tar.gz';
+            $fullPath = $path . '/' . $item;
+            if ($this->isDelete($item, self::CLEANUP_LOCAL_FILES_SECONDS)) {
+                // Check if file exist on cloud before delete
+                if ($this->s3->exists($this->s3->getRoot() . '/' . $filename)) {
+                    $delete = true;
+                } else {
+                    if ($this->isDelete($item, self::CLEANUP_CLOUD_FILES_SECONDS)) {
+                        $delete = true;
+                    } else {
+                        Console::warning('Skipping delete not found on cloud: ' . $filename . ' ');
+                        $delete = false;
+                    }
+                }
+
+                if ($delete === true) {
+                    Console::success('Deleting: ' . $fullPath);
+                    shell_exec('rm -rf ' . $fullPath);
+                }
+            }
+        }
+
+        self::log('Clean local finish ' . (microtime(true) - $start) . ' seconds');
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function cleanCloudFiles(): void
+    {
+        self::log('Clean cloud start');
+        $start = microtime(true);
+        $files = $this->s3->getFiles($this->s3->getRoot());
+
+        if ($files['KeyCount'] > 0) {
+            foreach ($files['Contents'] as $file) {
+                $date = basename(basename($file['Key']), '.tar.gz');
+                if ($this->isDelete($date, self::CLEANUP_CLOUD_FILES_SECONDS)) {
+                    if ($this->s3->delete($file['Key'])) {
+                        Console::success('Deleting: ' . $file['Key']);
+                    }
+                }
+            }
+        }
+
+        self::log('Clean cloud finish ' . (microtime(true) - $start) . ' seconds');
+    }
+
+    /**
+     * @param string $item
+     * @param int $seconds
+     * @return bool
+     */
+    public function isDelete(string $item, int $seconds): bool
+    {
+        if (!str_contains($item, '_')) {
+            return false;
+        }
+
+        [$year, $month, $day, $hour, $minute, $second] = explode('_', $item);
+        $date = $year . '-' . $month . '-' . $day . ' ' . $hour . ':' . $minute . ':' . $second;
+
+        try {
+            $now = new \DateTime();
+            $backupDate = new \DateTime($date);
+            if (($now->getTimestamp() - $backupDate->getTimestamp()) > $seconds) {
+                return true;
+            }
+        } catch (Exception $e) {
+        }
+
+        return false;
+    }
+}

src/Appwrite/Platform/Tasks/Restore.php

@@ -0,0 +1,342 @@
+<?php
+
+namespace Appwrite\Platform\Tasks;
+
+use Exception;
+use Utopia\App;
+use Utopia\DSN\DSN;
+use Utopia\Platform\Action;
+use Utopia\CLI\Console;
+use Utopia\Storage\Device;
+use Utopia\Storage\Device\DOSpaces;
+use Utopia\Storage\Device\Local;
+use Utopia\Validator\Boolean;
+use Utopia\Validator\Text;
+
+class Restore extends Action
+{
+    public const BACKUPS_PATH = '/backups';
+    public const DATADIR = '/var/lib/mysql';
+    public const DOWNLOAD_CHUNK_SIZE = 40 * 1024 * 1024; // Must be greater than 5MB;
+    public const VERSION = 'v1';
+    public const RETRY_DOWNLOAD = 5;
+    public const RETRY_PREPARE = 5;
+    public const RETRY_DECOMPRESS = 5;
+    public const RETRY_TAR = 5;
+    protected ?DOSpaces $s3 = null;
+    protected string $xtrabackupContainerId;
+    protected int $processors = 1;
+
+    public function __construct()
+    {
+        $this
+            ->desc('Restore a DB')
+            ->param('id', '', new Text(19), 'The backup identification')
+            ->param('cloud', null, new Boolean(true), 'Download backup from cloud or use local directory')
+            ->param('database', null, new Text(15), 'The Database name for example db_fra1_01')
+            ->callback(fn ($id, $cloud, $project) => $this->action($id, $cloud, $project));
+    }
+
+    public static function getName(): string
+    {
+        return 'restore';
+    }
+
+    public function action(string $id, string $cloud, string $database): void
+    {
+        try {
+            $this->checkEnvVariables();
+            $this->setContainerId();
+            $this->setProcessors();
+
+            $datadir = self::DATADIR;
+
+            try {
+                $dsn = new DSN(App::getEnv('_APP_CONNECTIONS_BACKUPS_STORAGE', ''));
+                $this->s3 = new DOSpaces('/' . $database . '/' . self::VERSION, $dsn->getUser(), $dsn->getPassword(), $dsn->getPath(), $dsn->getParam('region'));
+                $this->s3->setTransferChunkSize(self::DOWNLOAD_CHUNK_SIZE);
+            } catch (\Exception $e) {
+                throw new Exception($e->getMessage() . 'Invalid DSN.');
+            }
+
+            if (!file_exists($datadir)) {
+                throw new Exception('Datadir not found: ' . $datadir);
+            }
+
+            if (count(scandir($datadir)) > 2) {
+                throw new Exception($datadir . ' must be empty!');
+            }
+
+            $this->log('--- Restore Start ' . $id . ' --- ');
+
+            $filename = $id . '.tar.gz';
+            $start = microtime(true);
+            $cloud = $cloud === 'true' || $cloud === '1';
+
+            $local = new Local(self::BACKUPS_PATH . '/restore/' . $id);
+            $files = $local->getRoot() . '/files';
+
+            if (file_exists($local->getRoot())) {
+                shell_exec('mv ' . $local->getRoot() . ' ' . $local->getRoot() . '/../DELETE_ME/' . time());
+            }
+
+            if (!mkdir($files, 0755, true)) {
+                throw new Exception('Error creating directory: ' . $files);
+            }
+
+            if ($cloud) {
+                $this->download($local->getPath($filename), $local); // Fast!
+                $this->untar($local->getPath($filename), $files);
+            } else {
+                $source = self::BACKUPS_PATH . '/' . $database . '/' . self::VERSION . '/' . $id;
+                $this->log('Copying... ' . $source);
+
+                if (!file_exists($source)) {
+                    throw new Exception('Source not found: ' . $source);
+                }
+
+                shell_exec('cp -r ' . $source . ' ' . $local->getRoot() . '/../');
+            }
+
+            if (!file_exists($files)) {
+                throw new Exception('Files directory not found: ' . $files);
+            }
+
+            $this->decompress($files); // Uncompressed is long!
+            $this->prepare($files);
+            $this->restore($files, $cloud, $datadir);
+
+            $this->log('Restore Finish in ' . (microtime(true) - $start) . ' seconds');
+        } catch (Exception $e) {
+            //todo: send alerts sentry?
+            Console::error(date('Y-m-d H:i:s ') . $e->getMessage());
+        }
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function download(string $file, Device $local)
+    {
+        $filename = basename($file);
+        $path = $this->s3->getPath($filename);
+
+        if (!$this->s3->exists($path)) {
+            throw new Exception('File: ' . $path . ' does not exist on cloud');
+        }
+
+        $this->retry(function () use ($path, $file, $local, $filename) {
+            if (file_exists($local->getPath('tmp_' . $filename))) {
+                Console::warning('Deleting tmp_' . $filename);
+                if (!$local->deletePath('tmp_' . $filename)) {
+                    throw new Exception('Error deleting tmp download dir');
+                }
+            }
+
+            $this->log('Download start');
+
+            if (!$this->s3->transfer($path, $file, $local)) {
+                throw new Exception('Error Downloading ' . $file);
+            }
+        }, self::RETRY_DOWNLOAD);
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function untar(string $file, string $directory)
+    {
+        $this->log('Untar Start');
+
+        $this->retry(function () use ($file, $directory) {
+            $stdout = '';
+            $stderr = '';
+            $cmd = 'tar -xzf ' . $file . ' -C ' . $directory;
+            Console::execute($cmd, '', $stdout, $stderr);
+            if (!empty($stderr)) {
+                throw new Exception($stderr);
+            }
+        }, self::RETRY_TAR);
+
+        if (!file_exists($file)) {
+            throw new Exception('Restore file not found: ' . $file);
+        }
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function decompress(string $target)
+    {
+        $this->log('Decompress start');
+
+        $logfile = $target . '/../log.txt';
+
+        $args = [
+            'xtrabackup',
+            '--decompress',
+            '--strict',
+            '--remove-original', // Time consuming.
+            '--compress-threads=' . $this->processors,
+            '--parallel=' . $this->processors,
+            '--target-dir=' . $target,
+            '2> ' . $logfile,
+        ];
+
+        $this->retry(function () use ($args, $logfile) {
+            shell_exec('docker exec ' . $this->xtrabackupContainerId . ' ' . implode(' ', $args));
+
+            $stderr = shell_exec('tail -1 ' . $logfile);
+            if (!str_contains($stderr, 'completed OK!')) {
+                throw new Exception('Decompress failed');
+            }
+        }, self::RETRY_DECOMPRESS);
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function prepare(string $target)
+    {
+        $this->log('Prepare start');
+
+        if (!file_exists($target)) {
+            throw new Exception('prepare error directory not found: ' . $target);
+        }
+
+        $logfile = $target . '/../log.txt';
+
+        $args = [
+            'xtrabackup',
+            '--prepare',
+            '--parallel=' . $this->processors,
+            '--strict',
+            '--target-dir=' . $target,
+            '2> ' . $logfile,
+        ];
+
+        $this->retry(function () use ($args, $logfile) {
+            $cmd = 'docker exec ' . $this->xtrabackupContainerId . ' ' . implode(' ', $args);
+            shell_exec($cmd);
+
+            $stderr = shell_exec('tail -1 ' . $logfile);
+            if (!str_contains($stderr, 'completed OK!')) {
+                throw new Exception(' Prepare failed:' . $stderr);
+            }
+        }, self::RETRY_PREPARE);
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function restore(string $target, bool $cloud, string $datadir)
+    {
+        $this->log('Restore start');
+
+        if (!file_exists($target)) {
+            throw new Exception('Error Restoring directory not found: ' . $target);
+        }
+
+        $logfile = $target . '/../log.txt';
+
+        $args = [
+            'xtrabackup',
+            '--move-back',
+            '--strict',
+            '--parallel=' . $this->processors,
+            '--target-dir=' . $target,
+            '--datadir=' . $datadir,
+            '2> ' . $logfile,
+        ];
+
+        $cmd = 'docker exec ' . $this->xtrabackupContainerId . ' ' . implode(' ', $args);
+        shell_exec($cmd);
+
+        $stderr = shell_exec('tail -1 ' . $logfile);
+        if (!str_contains($stderr, 'completed OK!')) {
+            throw new Exception('Restore failed: ' . $stderr);
+        }
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function checkEnvVariables(): void
+    {
+        foreach (
+            [
+                '_APP_CONNECTIONS_BACKUPS_STORAGE',
+                '_APP_CONNECTIONS_DB_REPLICAS',
+            ] as $env
+        ) {
+            if (empty(App::getEnv($env))) {
+                throw new Exception('Can\'t read ' . $env);
+            }
+        }
+    }
+
+    public function log(string $message): void
+    {
+        if (!empty($message)) {
+            Console::log(date('Y-m-d H:i:s') . ' ' . $message);
+        }
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function setContainerId()
+    {
+        $stdout = '';
+        $stderr = '';
+        Console::execute('docker ps -f "name=xtrabackup" --format "{{.ID}}"', '', $stdout, $stderr);
+        if (!empty($stderr)) {
+            throw new Exception('Error setting container Id: ' . $stderr);
+        }
+
+        $containerId = str_replace(PHP_EOL, '', $stdout);
+        if (empty($containerId)) {
+            throw new Exception('Xtrabackup Container ID not found');
+        }
+
+        $this->xtrabackupContainerId = $containerId;
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function setProcessors()
+    {
+        $stdout = '';
+        $stderr = '';
+        Console::execute('docker exec ' . $this->xtrabackupContainerId . ' nproc', '', $stdout, $stderr);
+        if (!empty($stderr)) {
+            throw new Exception('Error setting processors: ' . $stderr);
+        }
+
+        $processors = str_replace(PHP_EOL, '', $stdout);
+        $processors = empty($processors) ? 1 : intval($processors);
+
+        //$this->processors = \max(1, $processors - 2);
+        // todo: Using all processors was with no errors
+        $this->processors = $processors;
+    }
+
+    /**
+     * @throws Exception
+     */
+    public function retry(callable $action, int $retries, int $sleep = 1)
+    {
+        try {
+            return $action();
+        } catch (Exception $e) {
+            if ($retries > 0) {
+                Console::warning('Retrying (' . $retries . ') ' . $e->getMessage());
+                sleep($sleep);
+                return $this->retry($action, $retries - 1, $sleep);
+            } else {
+                throw $e;
+            }
+        }
+    }
+}