blob: d51d3562d81564fd6f038e2356927d77790344ca (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
---
- name: "Create backup group"
become: true
ansible.builtin.group:
name: "{{ backup_group }}"
system: true
- name: "Create backup user"
become: true
ansible.builtin.user:
name: "{{ backup_user }}"
group: "{{ backup_group }}"
system: true
shell: "/sbin/nologin"
create_home: false
- name: "Create restic cache directory"
become: true
ansible.builtin.file:
path: "/var/cache/{{ backup_name }}-backup"
state: "directory"
owner: "{{ backup_user }}"
group: "{{ backup_group }}"
mode: "0700"
- name: "Create credential store directory"
become: true
ansible.builtin.file:
path: "/etc/credstore"
state: "directory"
owner: "root"
group: "root"
mode: "0700"
- name: "Deploy backup credentials"
become: true
ansible.builtin.template:
src: "backup.env.j2"
dest: "/etc/credstore/{{ backup_name }}-backup.env"
owner: "root"
group: "root"
mode: "0600"
no_log: true
- name: "Schedule backup via systemd"
ansible.builtin.include_tasks: "systemd.yml"
when: ansible_facts['service_mgr'] == "systemd"
- name: "Schedule backup via cron"
ansible.builtin.include_tasks: "openrc.yml"
when: ansible_facts['service_mgr'] == "openrc"
- name: "Deploy restore script"
become: true
ansible.builtin.template:
src: "restore.sh.j2"
dest: "/usr/local/bin/{{ backup_name }}-restore"
owner: "root"
group: "root"
mode: "0755"
tags:
- "never"
- "restore"
- name: "Run restore"
become: true
ansible.builtin.command:
cmd: "/usr/local/bin/{{ backup_name }}-restore"
changed_when: true
tags:
- "never"
- "restore"
|
