SimpleNAS-Notfall-…zip auspacken (liegt auf USB-Stick o. Ä.), "
"unter Windows WIEDERHERSTELLEN-Windows.cmd doppelklicken, unter Linux "
"bash wiederherstellen-linux.sh. Das Tool fragt:",
"pkg_box": "Storage Box", "pkg_user": "Benutzer", "pkg_port": "Port", "pkg_path": "Pfad auf der Box",
"pkg_boxpw": "Passwort der Storage Box", "pkg_archpw": "Archiv-Passwort", "pkg_see": "siehe 2.",
"pkg_boxpw_see": "nicht auf dem Blatt – siehe 1.",
"local_copy": "Der Ordner {p} enthält die Dateien direkt – einfach kopieren (ohne {v}).",
"pkg_where": "Kein Paket zur Hand? Es lässt sich aus dem Repository neu bauen: {u} → Ordner "
"notfall/, bash notfall/paket-bauen.sh.",
"pkg_only": "Das Notfall-Paket kennt nur restic auf einer Hetzner Storage Box bzw. einem SFTP-Server "
"mit Passwort – für dieses Ziel bitte den Weg von Hand nehmen.",
"manual_title": "Von Hand mit restic und rclone",
"manual_intro": "restic und rclone von restic.net bzw. rclone.org holen. Diese Konfiguration als "
"Datei notfall.conf speichern; Werte in ‹…› ersetzen – Passwörter vorher "
"mit rclone obscure PASSWORT umwandeln:",
"manual_cmds": "Dann (Windows: set statt export):",
"manual_custom": "Dieser Job nutzt eine eigene rclone-Konfiguration. Sie steht nicht auf dem Blatt – "
"bitte separat aufbewahren. Der Abschnitt darin heißt im Add-on {s}.",
"ph_pw": "rclone obscure: Passwort des Anbieters", "ph_archpw": "rclone obscure: Archiv-Passwort (2.)",
"ph_secret": "geheim – beim Anbieter nachsehen", "ph_key": "privater Schlüssel, eine Zeile mit \\n",
"target_dir": "wiederhergestellt",
},
"en": {
"title": "Emergency sheet", "made": "Created {d} by Simple NAS · job ID {id}",
"print": "Print",
"confidential": "Confidential. Anyone holding this sheet and access to the storage can read all "
"backed-up data. Print it and keep it safe – not on the NAS or in Home Assistant. "
"Print again after every change to the job.",
"where": "1. Where the data is", "engine": "Method", "provider": "Provider",
"remote_path": "Path on the target", "provider_pw": "Provider password / access",
"provider_pw_hetzner": "deliberately not printed – forgotten? Reset it in the Hetzner Console "
"(Storage Box → reset password); the data is kept.",
"provider_pw_other": "deliberately not printed – reset it or create a new key at the provider.",
"handwrite": "write it in by hand if you like:",
"engine_restic": "restic – encrypted archive with snapshots",
"engine_rclone": "rclone – files 1:1 at the provider",
"engine_rclone_crypt": "rclone – files 1:1 at the provider, encrypted (rclone crypt)",
"pw": "2. Archive password", "pw_warn": "Without this password the data is lost – "
"Hetzner or the provider cannot decrypt it either.",
"pw_none": "This job does not encrypt – there is no archive password.",
"pw_chars": "{n} characters. Easily confused characters are explained below them.",
"what": "3. What is backed up", "sources": "Source folders", "last": "Last backup",
"never": "none yet", "snap_host": "restic host / tag of the snapshots",
"auto": "If only Home Assistant is reinstalled (same hardware, /config kept), the jobs and the "
"password come back with the add-on (copy in /config/.simplenas/auto).",
"restore": "4. Restoring without Home Assistant",
"pkg_title": "With the emergency package (Windows or Linux)",
"pkg_steps": "Unpack SimpleNAS-Notfall-…zip (kept on a USB stick or similar); on Windows "
"double-click WIEDERHERSTELLEN-Windows.cmd, on Linux run "
"bash wiederherstellen-linux.sh. The tool asks for:",
"pkg_box": "Storage Box", "pkg_user": "User", "pkg_port": "Port", "pkg_path": "Path on the box",
"pkg_boxpw": "Storage Box password", "pkg_archpw": "Archive password", "pkg_see": "see 2.",
"pkg_boxpw_see": "not on this sheet – see 1.",
"local_copy": "The folder {p} holds the files as they are – just copy them (without {v}).",
"pkg_where": "No package at hand? Rebuild it from the repository: {u} → folder notfall/, "
"bash notfall/paket-bauen.sh.",
"pkg_only": "The emergency package only handles restic on a Hetzner Storage Box or an SFTP server "
"with a password – use the manual way for this target.",
"manual_title": "By hand with restic and rclone",
"manual_intro": "Get restic and rclone from restic.net and rclone.org. Save this configuration as "
"notfall.conf; replace the values in ‹…› – convert passwords with "
"rclone obscure PASSWORD first:",
"manual_cmds": "Then (Windows: set instead of export):",
"manual_custom": "This job uses a custom rclone configuration. It is not printed here – keep it "
"separately. Its section is called {s} in the add-on.",
"ph_pw": "rclone obscure: provider password", "ph_archpw": "rclone obscure: archive password (2.)",
"ph_secret": "secret – look it up at the provider", "ph_key": "private key, one line with \\n",
"target_dir": "restored",
},
}
CSS = """
*{box-sizing:border-box}
body{font:14px/1.45 system-ui,-apple-system,Segoe UI,Roboto,sans-serif;color:#111;background:#fff;
max-width:820px;margin:24px auto;padding:0 16px}
h1{font-size:24px;margin:0 0 2px}h2{font-size:16px;margin:22px 0 8px;border-bottom:2px solid #111;padding-bottom:3px}
h3{font-size:14px;margin:14px 0 6px}
.sub{color:#555;font-size:12.5px}
.box{border:1.5px solid #b00;background:#fff5f5;padding:8px 12px;margin:12px 0;border-radius:4px}
table.kv{border-collapse:collapse;width:100%}table.kv td{border-bottom:1px solid #ddd;padding:5px 6px;vertical-align:top}
table.kv td:first-child{width:34%;color:#444}
.mono,code,pre{font-family:Consolas,"DejaVu Sans Mono",Menlo,monospace}
pre{background:#f4f4f4;border:1px solid #ddd;padding:8px 10px;white-space:pre-wrap;word-break:break-all;font-size:12.5px}
.pw{display:flex;flex-wrap:wrap;gap:3px;margin:8px 0}
.pw span{display:inline-flex;flex-direction:column;align-items:center;min-width:30px;border:1px solid #999;padding:3px 2px 2px}
.pw b{font:600 20px Consolas,"DejaVu Sans Mono",Menlo,monospace;white-space:pre}
.pw i{font-size:10.5px;color:#555;font-style:normal;line-height:1.1;text-align:center;min-height:10px}
.pw small{font-size:9px;color:#999}
.line{display:inline-block;min-width:260px;border-bottom:1px solid #111;height:1.2em}
button{font:inherit;padding:6px 16px;cursor:pointer}
@media print{button{display:none}body{margin:0;max-width:none}h2{break-after:avoid}pre,.pw,table{break-inside:avoid}}
"""
def _e(s):
return html.escape(str(s if s is not None else ""), quote=True)
def _password_cells(pw, lang):
amb = AMBIGUOUS[lang]
cells = []
for i, ch in enumerate(pw, 1):
cells.append(f"{_e(ch)}{_e(amb.get(ch, ''))}{i}")
return '{_e(cmds)}")
return "".join(out)
if prov == "local" and not job.get("encrypt"):
out.append(f"{tx['local_copy'].format(p='' + _e(rb._base(job)) + '', v=_e(rb.VERSIONS_DIR))}
{tx['manual_custom'].format(s=_e('t_' + str(job.get('id', ''))))}
") return "".join(out) m = _masked_job(job, tx) conf = rb.build_rclone_conf(m, obscure=lambda s: s).strip() out.append(f"{tx['manual_intro']}
{_e(conf)}{tx['manual_cmds']}
") if engine == "restic": repo = rb.restic_repo(m) cmds = ("export RCLONE_CONFIG=notfall.conf\n" f"restic -r {repo} snapshots\n" f"restic -r {repo} ls latest /\n" f"restic -r {repo} restore latest --target ./{target_dir}" + (f"\nrestic -r {repo} {include}" if include else "")) else: root = rb.rclone_root(m) cmds = ("export RCLONE_CONFIG=notfall.conf\n" f"rclone lsd {root}\n" f"rclone copy {root} ./{target_dir} --exclude \"/{rb.VERSIONS_DIR}/**\" --progress") out.append(f"{_e(cmds)}")
return "".join(out)
def _package_supported(job):
t = job.get("target") or {}
if job.get("engine") != "restic":
return False
if t.get("provider") == "hetzner":
return True
return t.get("provider") == "sftp" and bool(t.get("password")) and not t.get("key_pem")
def render(job, lang="de", now=None):
lang = lang if lang in TEXT else "de"
tx = TEXT[lang]
t = job.get("target") or {}
prov = t.get("provider", "")
engine = job.get("engine", "")
when = (now.strftime("%d.%m.%Y %H:%M") if lang == "de" else now.strftime("%Y-%m-%d %H:%M")) if now else ""
def label(f):
return rb.FIELD_LABELS.get(f, f) if lang == "de" else FIELD_NAMES_EN.get(f, f)
rows = [(tx["engine"], tx["engine_restic"] if engine == "restic"
else tx["engine_rclone_crypt"] if job.get("encrypt") else tx["engine_rclone"]),
(tx["provider"], PROVIDER_NAMES[lang].get(prov, prov))]
for f in rb.TARGET_FIELDS.get(prov, ()):
if f in rb.SECRET_TARGET_FIELDS:
continue
v = t.get(f)
if f == "port" and not v and prov in ("hetzner", "sftp"):
v = 22
if v not in (None, ""):
rows.append((label(f), v))
if prov != "local":
rows.append((tx["remote_path"], job.get("remote_path") or "/"))
kv = "".join(f'{_e(pw)}'
f'{_password_cells(pw, lang)}{_e(tx['pw_none'])}
" last = (job.get("last_backup") or {}) last_txt = f"{last.get('at', '').replace('T', ' ')} ({last.get('status', '')})" if last.get("at") else tx["never"] what = [(tx["sources"], "\n".join(job.get("sources") or [])), (tx["last"], last_txt)] if engine == "restic": what.append((tx["snap_host"], f"{rb.RESTIC_HOST} / {rb.RESTIC_TAG}")) what_html = "".join(f'{tx['pkg_steps']}
{tx['pkg_where'].format(u=_e(REPO_URL))}
") else: pkg_html = f"{_e(tx['pkg_only'])}
" name = job.get("name", "") return f"""{_e(tx['auto'])}