Index: deploy/backup.sh
===================================================================
--- deploy/backup.sh	(revision b5bae2470a5cdf5ae561708274d413dbf680523b)
+++ deploy/backup.sh	(revision b5bae2470a5cdf5ae561708274d413dbf680523b)
@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+#
+# PrutCMS v10 — nightly backup script.
+#
+# Snapshots:
+#   • SQLite database (uses .backup so it's safe while the app is running)
+#   • storage/audio/        (uploaded MP3s — files outside /media for security)
+#   • storage/media/        (avatars, audio covers — public files)
+#   • storage/.audio-secret (HMAC secret — needed to verify old signed URLs)
+#
+# Output: a single tar.gz per run in $BACKUP_DIR, named by timestamp.
+# Rotation: keeps the last $KEEP_DAYS dumps, prunes older.
+#
+# Recommended cron:
+#   0 3 * * * /home/robin/prutcms/deploy/backup.sh >> /home/robin/prutcms/logs/backup.log 2>&1
+
+set -euo pipefail
+
+# ── Config ────────────────────────────────────────────────────────
+APP_DIR="${APP_DIR:-/home/robin/prutcms}"
+BACKUP_DIR="${BACKUP_DIR:-/home/robin/backups/prutcms}"
+KEEP_DAYS="${KEEP_DAYS:-14}"
+TS="$(date +%Y%m%d-%H%M%S)"
+
+mkdir -p "$BACKUP_DIR"
+
+# ── DB snapshot via sqlite3 .backup (consistent under WAL) ────────
+DB_FILE="$APP_DIR/storage/database.sqlite"
+DB_SNAPSHOT="$BACKUP_DIR/db-$TS.sqlite"
+if [ -f "$DB_FILE" ]; then
+    sqlite3 "$DB_FILE" ".backup '$DB_SNAPSHOT'"
+else
+    echo "WARN: $DB_FILE not found, skipping DB backup" >&2
+fi
+
+# ── Tar the snapshot + storage subdirs ────────────────────────────
+ARCHIVE="$BACKUP_DIR/prutcms-$TS.tar.gz"
+tar -czf "$ARCHIVE" \
+    -C "$BACKUP_DIR" "$(basename "$DB_SNAPSHOT")" \
+    -C "$APP_DIR/storage" \
+        $( [ -d "$APP_DIR/storage/audio"        ] && echo audio        ) \
+        $( [ -d "$APP_DIR/storage/media"        ] && echo media        ) \
+        $( [ -f "$APP_DIR/storage/.audio-secret" ] && echo .audio-secret )
+
+# Remove the loose db-XXX.sqlite (it's inside the tarball now)
+rm -f "$DB_SNAPSHOT"
+
+# ── Rotation ───────────────────────────────────────────────────────
+find "$BACKUP_DIR" -type f -name 'prutcms-*.tar.gz' -mtime "+$KEEP_DAYS" -delete
+
+SIZE="$(du -h "$ARCHIVE" | cut -f1)"
+echo "[$TS] backup OK: $ARCHIVE ($SIZE)"