`launchd/com.steve.nas-dwdump-mirror-root.plist`

47 lines
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<!--
  com.steve.nas-dwdump-mirror-ROOT — root-context replacement for the user LaunchAgent
  com.steve.nas-dwdump-mirror (the dw_unified 3-2-1 on-prem mirror). Same TCC fix as the
  realestate sibling: a user launchd agent EPERM'd writing to /Volumes/Henry because macOS
  won't honor Full Disk Access on the SIP /bin/bash responsible-process; a system
  LaunchDaemon runs outside the per-user TCC consent domain and can write the external
  volume. This is what let the dw_unified backup go 41 days stale silently.
  Installed to /Library/LaunchDaemons by scripts/install-root-daemon-dwdump.sh.
  HOME=/var/root points ssh at root's copy of the Kamatera key. Runs 03:45 as root.
  Added 2026-08-07 (TK-10323).
-->
<plist version="1.0">
<dict>
  <key>Label</key>
  <string>com.steve.nas-dwdump-mirror-root</string>
  <key>ProgramArguments</key>
  <array>
    <string>/usr/local/bin/nas-backup-sh</string>
    <string>/Users/macstudio3/Projects/nas-setup/scripts/pull-dw-dump.sh</string>
  </array>
  <key>EnvironmentVariables</key>
  <dict>
    <key>HOME</key>
    <string>/var/root</string>
    <key>HENRY_BACKUP_DIR</key>
    <string>/Volumes/Henry/dw-backups/dw_unified</string>
    <key>NAS_BACKUP_DIR</key>
    <string>/Volumes/DW-Backups/dw_unified</string>
    <key>PATH</key>
    <string>/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin</string>
  </dict>
  <key>StartCalendarInterval</key>
  <dict>
    <key>Hour</key><integer>3</integer>
    <key>Minute</key><integer>45</integer>
  </dict>
  <key>RunAtLoad</key>
  <false/>
  <key>StandardOutPath</key>
  <string>/Users/macstudio3/Projects/nas-setup/data/launchd-dwdump-root.out.log</string>
  <key>StandardErrorPath</key>
  <string>/Users/macstudio3/Projects/nas-setup/data/launchd-dwdump-root.err.log</string>
</dict>
</plist>