Fix backup cron scripts for Kopia password and MariaDB dumps.

Pass KOPIA_REPOSITORY_PASSWORD into snapshot create; use MARIADB_ROOT_PASSWORD for romm and bookstack app user for bookstack root mismatch.

stacks/backup/scripts/backup-dump-databases.sh

@@ -22,16 +22,23 @@ dump_postgres() {
   docker exec "${name}" pg_dump -U "${user}" "${db}" | gzip -c > "${DIR}/${name}.sql.gz"
 }
 
+# user: root (default) or app account (e.g. bookstack — root password may not match env)
 dump_mariadb() {
   name="$1"
   db="$2"
+  user="${3:-root}"
   if ! docker ps --format '{{.Names}}' | grep -qx "${name}"; then
     log "skip ${name} (not running)"
     return 0
   fi
-  log "dump ${name} → ${db}"
-  docker exec "${name}" sh -c "mariadb-dump -u root -p\"\$MYSQL_ROOT_PASSWORD\" \"${db}\"" \
-    | gzip -c > "${DIR}/${name}.sql.gz"
+  log "dump ${name} → ${db} (as ${user})"
+  if [ "${user}" = "root" ]; then
+    docker exec "${name}" sh -c "mariadb-dump -u root -p\"\${MARIADB_ROOT_PASSWORD:-\$MYSQL_ROOT_PASSWORD}\" \"${db}\"" \
+      | gzip -c > "${DIR}/${name}.sql.gz"
+  else
+    docker exec "${name}" sh -c "mariadb-dump -u \"${user}\" -p\"\${MYSQL_PASSWORD:-\$MARIADB_PASSWORD}\" \"${db}\"" \
+      | gzip -c > "${DIR}/${name}.sql.gz"
+  fi
 }
 
 log "starting database dumps → ${DIR}"
@@ -42,7 +49,7 @@ dump_postgres postgres_authentik authentik authentik
 dump_postgres postgres_famapp famapp famapp
 dump_postgres postgres_resume postgres postgres
 
-dump_mariadb mariadb_bookstack bookstack
+dump_mariadb mariadb_bookstack bookstack bookstack
 dump_mariadb owncloud_mariadb owncloud
 dump_mariadb romm-db romm