feat: verify postgres backups

scripts/verify-postgres-backup.sh

@@ -0,0 +1,19 @@
+#!/bin/sh
+set -eu
+
+: "${BACKUP_FILE:?Set BACKUP_FILE to a PostgreSQL custom-format dump}"
+
+if [ ! -f "$BACKUP_FILE" ]; then
+  printf '%s\n' "Backup file not found: $BACKUP_FILE" >&2
+  exit 1
+fi
+
+if [ ! -s "$BACKUP_FILE" ]; then
+  printf '%s\n' "Backup file is empty: $BACKUP_FILE" >&2
+  exit 1
+fi
+
+docker compose -f compose.production.yaml run --rm -T postgres \
+  pg_restore --list < "$BACKUP_FILE" >/dev/null
+
+printf '%s\n' "Backup archive is readable: $BACKUP_FILE"

scripts/verify-postgres-backup.test.sh

@@ -0,0 +1,21 @@
+#!/bin/sh
+set -eu
+
+script_dir=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+test_dir=$(mktemp -d)
+trap 'rm -rf "$test_dir"' EXIT
+
+printf '%s\n' 'fake dump' > "$test_dir/backup.dump"
+mkdir -p "$test_dir/bin"
+printf '%s\n' '#!/bin/sh' 'exit 0' > "$test_dir/bin/docker"
+chmod +x "$test_dir/bin/docker"
+
+PATH="$test_dir/bin:$PATH" BACKUP_FILE="$test_dir/backup.dump" \
+  sh "$script_dir/verify-postgres-backup.sh" >/dev/null
+
+if BACKUP_FILE="$test_dir/missing.dump" sh "$script_dir/verify-postgres-backup.sh" >/dev/null 2>&1; then
+  printf '%s\n' 'Expected missing backup to fail.' >&2
+  exit 1
+fi
+
+printf '%s\n' 'verify-postgres-backup tests passed.'