From 0dec9c95e1c16179f5c4226b1b46931687a7f58b Mon Sep 17 00:00:00 2001
From: LucasMZ <git@lucasmz.dev>
Date: Sat, 31 May 2025 14:35:13 -0300
Subject: [PATCH] android: be stricter about system backups

we should also exclude D2D because it results in a broken store probably due to KeyStore

Fixes #https://github.com/tailscale/tailscale/issues/732

Signed-off-by: LucasMZ <git@lucasmz.dev>
---
 android/src/main/AndroidManifest.xml          |  2 ++
 android/src/main/res/xml/backup_rules.xml     |  9 +++++++++
 .../main/res/xml/data_extraction_rules.xml    | 20 +++++++++++++++++++
 3 files changed, 31 insertions(+)
 create mode 100644 android/src/main/res/xml/backup_rules.xml
 create mode 100644 android/src/main/res/xml/data_extraction_rules.xml

diff --git a/android/src/main/AndroidManifest.xml b/android/src/main/AndroidManifest.xml
index 92cb0dea41..9633e2b2bd 100644
--- a/android/src/main/AndroidManifest.xml
+++ b/android/src/main/AndroidManifest.xml
@@ -32,6 +32,8 @@
     <application
         android:name=".App"
         android:allowBackup="false"
+        android:fullBackupContent="@xml/backup_rules"
+        android:dataExtractionRules="@xml/data_extraction_rules"
         android:banner="@drawable/tv_banner"
         android:icon="@mipmap/ic_launcher"
         android:label="Tailscale"
diff --git a/android/src/main/res/xml/backup_rules.xml b/android/src/main/res/xml/backup_rules.xml
new file mode 100644
index 0000000000..6de33f5c7c
--- /dev/null
+++ b/android/src/main/res/xml/backup_rules.xml
@@ -0,0 +1,9 @@
+<?kml version="1.0" encoding="utf-8"?>
+<!-- data_extraction_rules but for devices below Android 12 -->
+<full-backup-content>
+    <exclude domain="root"/>
+    <exclude domain="file"/>
+    <exclude domain="database"/>
+    <exclude domain="sharedpref"/>
+    <exclude domain="external"/>
+</full-backup-content>
\ No newline at end of file
diff --git a/android/src/main/res/xml/data_extraction_rules.xml b/android/src/main/res/xml/data_extraction_rules.xml
new file mode 100644
index 0000000000..63dca248e6
--- /dev/null
+++ b/android/src/main/res/xml/data_extraction_rules.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Do not allow system backups, including in device-transfer which ignores allowBackup, to not break Tailscale when restoring -->
+<!-- It would be nice to have only preferences backed up or some mechanism in-app to solve issues caused by KeyStore not being backed up -->
+<data-extraction-rules>
+    <cloud-backup>
+        <exclude domain="root"/>
+        <exclude domain="file"/>
+        <exclude domain="database"/>
+        <exclude domain="sharedpref"/>
+        <exclude domain="external"/>
+    </cloud-backup>
+
+    <device-transfer>
+        <exclude domain="root"/>
+        <exclude domain="file"/>
+        <exclude domain="database"/>
+        <exclude domain="sharedpref"/>
+        <exclude domain="external"/>
+    </device-transfer>
+</data-extraction-rules>
\ No newline at end of file