devuni/notifier-package

Laravel package for automated backups and notifications.

v2.6.3 2026-04-22 13:07 UTC

Requires

• php: ^8.4
• guzzlehttp/guzzle: ^7.10.0
• illuminate/console: ^12.55.0 || ^13.0
• illuminate/contracts: ^12.55.0 || ^13.0
• illuminate/http: ^12.55.0 || ^13.0
• illuminate/queue: ^12.55.0 || ^13.0
• illuminate/routing: ^12.55.0 || ^13.0
• illuminate/support: ^12.55.0 || ^13.0
• laravel/prompts: ^0.3.16

Requires (Dev)

• larastan/larastan: ^3.9.3
• laravel/pint: ^1.29.0
• mockery/mockery: ^1.6.12
• nunomaduro/collision: ^8.9.2
• orchestra/testbench: ^11.0.0 || ^12.0
• pestphp/pest: ^4.4.5
• pestphp/pest-plugin-laravel: ^4.1.0
• rector/rector: ^2.4.0

MIT

• Janeček David
• Ludwig Tomas

• notifications
• backup
• laravel
• notifier
• devuni

README

Encrypted database & storage backups for Laravel apps, shipped to the Devuni Notifier central server. AES-256 ZIPs, chunked HTTPS upload, token auth, queue support.

How it works

┌─────────────────────┐        encrypted ZIP         ┌─────────────────────┐
│  Your Laravel app   │  ───── chunked upload ─────▶ │  notifier.devuni.cz │
│  (this package)     │        (X-Notifier-Token)    │  (central server)   │
└─────────────────────┘                              └─────────────────────┘
         │                                                     │
         │ mysqldump + storage/app/public                      │ stores + monitors
         │ → AES-256 ZIP                                       │ → sends alerts
         ▼                                                     ▼
    local temp file                                     long-term backup archive
    (cleaned up after upload)

Heads up: This is the client side of the Devuni Notifier platform. Without a central server configured via NOTIFIER_URL, there's nowhere to send backups. If you don't have it, try spatie/laravel-backup instead.

Install

composer require devuni/notifier-package
php artisan vendor:publish --tag="notifier-config"
php artisan notifier:install   # interactive .env wizard
php artisan notifier:check     # verify setup (env, DB, 7z, mysqldump, URL)

Requirements: PHP 8.4+, Laravel 12+, mysqldump, and p7zip-full (recommended) or PHP zip extension.

Usage

Scheduled backups (recommended)

Add to routes/console.php:

use Illuminate\Support\Facades\Schedule;

Schedule::command('notifier:database-backup')->dailyAt('02:00')->onOneServer();
Schedule::command('notifier:storage-backup')->weeklyOn(0, '03:00')->onOneServer();

On demand

php artisan notifier:database-backup
php artisan notifier:storage-backup

HTTP API

Trigger backups from an external scheduler. Rate-limited to 10 req/min.

curl -X POST https://your-app.com/api/notifier/backup \
  -H "X-Notifier-Token: your-token" \
  -d "type=backup_database"   # or backup_storage

On failure the response returns an opaque error_id (UUID) — the full detail (stack trace, mysqldump/7z stderr) stays in your backup log channel. Grep logs for the UUID to correlate.

Configure

Minimum .env:

NOTIFIER_BACKUP_CODE=...                                        # auth token
NOTIFIER_URL=https://notifier.devuni.cz/api/v1/repositories/123 # your endpoint
NOTIFIER_BACKUP_PASSWORD=...                                    # ZIP password

Optional: NOTIFIER_LOGGING_CHANNEL, NOTIFIER_ROUTES_ENABLED, NOTIFIER_ROUTE_PREFIX, NOTIFIER_ZIP_STRATEGY (auto/cli/php), NOTIFIER_CHUNK_SIZE, NOTIFIER_QUEUE_CONNECTION. See config/notifier.php for defaults and descriptions.

Exclusions

Arrays — edit config/notifier.php:

'excluded_tables' => ['telescope_entries', 'sessions', 'cache', 'jobs', 'failed_jobs'],
'excluded_files'  => ['.gitignore', 'temp', 'logs/debug.log'],

Queue offloading

API-triggered backups can be offloaded to avoid PHP timeouts:

NOTIFIER_QUEUE_CONNECTION=redis   # or database, sqs, beanstalkd

Artisan commands always run synchronously regardless of this setting.

Security

• At rest: AES-256 encrypted archives with 0600 permissions, cleaned up after upload
• In transit: HTTPS-only, hash_equals token comparison, per-chunk + full-file SHA-256 verification
• No leaks: ZIP password passed via stdin (not argv — invisible to ps / /proc/*/cmdline); API errors return opaque UUIDs, not raw exception messages
• Report vulnerabilities: see security policy — don't open public issues

Links

• Changelog — see what's new in each release
• Contributing
• Full config reference

Credits

• Ludwig Tomas
• All contributors

License

MIT — see LICENSE.md.