Redesign the dashboard entirely

apps/api/package.json

@@ -22,7 +22,6 @@
     "@databuddy/rpc": "workspace:*",
     "@databuddy/shared": "workspace:*",
     "@elysiajs/cors": "^1.4.0",
-    "@elysiajs/cron": "^1.4.1",
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/exporter-trace-otlp-proto": "^0.208.0",
     "@opentelemetry/instrumentation-http": "^0.55.0",

apps/api/src/lib/clickhouse-backup.ts

@@ -88,18 +88,23 @@ async function getBackupMetadata(backupName: string): Promise<{
     num_files: number;
 } | null> {
     try {
+        // Escape LIKE special characters: backslashes first, then % and _
+        const escaped = backupName.replace(/\\/g, "\\\\").replace(/[%_]/g, "\\$&");
         const result = await clickHouseOG.query({
             query: `
                 SELECT 
                     total_size as size_bytes,
                     compressed_size as compressed_size_bytes,
                     num_files
                 FROM system.backups
-                WHERE name LIKE '%${backupName}%'
+                WHERE name LIKE {pattern:String}
                 AND status = 'BACKUP_CREATED'
                 ORDER BY start_time DESC
                 LIMIT 1
             `,
+            query_params: {
+                pattern: `%${escaped}%`,
+            },
         });
 
         const data = await result.json<{
@@ -160,7 +165,9 @@ export async function performClickHouseBackup(): Promise<BackupResult> {
 
         await ensureBackupTable();
 
-        const s3Url = `${env.R2_ENDPOINT}/${env.R2_BUCKET}/${backupName}/`;
+        // Normalize endpoint (remove trailing slashes) and build path-style URL for Tigris/S3-compatible storage
+        const endpoint = env.R2_ENDPOINT.replace(/\/+$/, '');
+        const s3Url = `${endpoint}/${env.R2_BUCKET}/${backupName}`;
         const lastBackupPath = await getLastBackupPath();
         const isIncremental = lastBackupPath !== null;
 
@@ -192,7 +199,8 @@ export async function performClickHouseBackup(): Promise<BackupResult> {
                 s3_max_put_burst = 50,
                 compression_method = 'zstd',
                 compression_level = 3,
-                max_backup_bandwidth = 104857600${baseBackupSetting}
+                max_backup_bandwidth = 104857600,
+                s3_use_virtual_addressing = false${baseBackupSetting}
         `;
 
         await backupClickHouse.command({ query: backupQuery });
@@ -404,7 +412,8 @@ export async function restoreBackup(
             FROM S3('${backupPath}', '${env.R2_ACCESS_KEY_ID}', '${env.R2_SECRET_ACCESS_KEY}')
             SETTINGS 
                 async = false,
-                s3_max_redirects = 10
+                s3_max_redirects = 10,
+                s3_use_virtual_addressing = false
         `;
 
         await backupClickHouse.command({ query: restoreQuery });