From 555246f00e871c943706c132903f942351fe0475 Mon Sep 17 00:00:00 2001
From: Oleksandr Berezovskyi <berezovskyi.oleksandr@gmail.com>
Date: Wed, 16 Sep 2026 11:41:22 +0300
Subject: [PATCH] fix(k8s/grocy): open SQLite database read-only in backup job

---
 kubernetes/app/grocy/cronjob-backup.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/kubernetes/app/grocy/cronjob-backup.yaml b/kubernetes/app/grocy/cronjob-backup.yaml
index aee6539..9dc7e03 100644
--- a/kubernetes/app/grocy/cronjob-backup.yaml
+++ b/kubernetes/app/grocy/cronjob-backup.yaml
@@ -25,8 +25,10 @@ spec:
                 - sh
                 - -c
                 - |
+                  set -e
                   apk add --no-cache sqlite
-                  sqlite3 /db-local/grocy.db ".backup /backup/grocy.db"
+                  sqlite3 "file:/db-local/grocy.db?mode=ro" ".backup /backup/grocy.db"
+                  [ "$(sqlite3 /backup/grocy.db 'PRAGMA integrity_check')" = ok ]
               volumeMounts:
                 - name: db
                   mountPath: /db-local