From bc10421a529005fe73afba9ed43cbf03a8429d0c Mon Sep 17 00:00:00 2001
From: Rudy Celekli <rudy@gradiahq.com>
Date: Sun, 18 Oct 2026 09:24:35 -0400
Subject: [PATCH] fix(backups): pass --batch so gpg uses the passphrase file

---
 support/support-infrastructure-maintainer.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/support/support-infrastructure-maintainer.md b/support/support-infrastructure-maintainer.md
index 090da915..50a30534 100644
--- a/support/support-infrastructure-maintainer.md
+++ b/support/support-infrastructure-maintainer.md
@@ -331,7 +331,7 @@ backup_database() {
     fi
     
     # Encrypt backup
-    if ! gpg --cipher-algo AES256 --compress-algo 1 --s2k-mode 3 \
+    if ! gpg --batch --cipher-algo AES256 --compress-algo 1 --s2k-mode 3 \
              --s2k-digest-algo SHA512 --s2k-count 65536 --symmetric \
              --passphrase-file "$ENCRYPTION_KEY" "$backup_file"; then
         handle_error "Database backup encryption failed for $db_name"
@@ -357,7 +357,7 @@ backup_files() {
     
     # Create compressed archive and encrypt
     if ! tar -czf - -C "$source_dir" . | \
-         gpg --cipher-algo AES256 --compress-algo 0 --s2k-mode 3 \
+         gpg --batch --cipher-algo AES256 --compress-algo 0 --s2k-mode 3 \
              --s2k-digest-algo SHA512 --s2k-count 65536 --symmetric \
              --passphrase-file "$ENCRYPTION_KEY" \
              --output "$backup_file"; then