Bart Sjerps
67 lines
1.3 KiB
YAML
67 lines
1.3 KiB
YAML
---
|
|
- name: Install packages
|
|
ansible.builtin.package:
|
|
name: "borgmatic"
|
|
state: present
|
|
|
|
- name: Create directories
|
|
file:
|
|
path: '{{ item }}'
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: '0750'
|
|
loop:
|
|
- '/etc/borgmatic'
|
|
- '/etc/borgmatic.d'
|
|
|
|
- name: Deploy borgmatic config
|
|
template:
|
|
src: templates/borgmatic-system.yaml
|
|
dest: /etc/borgmatic.d/system.yaml
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
|
|
- name: Deploy borgmatic excludes
|
|
template:
|
|
src: templates/borgmatic-excludes
|
|
dest: /etc/borgmatic/excludes
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
|
|
- name: SSH Keypair
|
|
openssh_keypair:
|
|
path: /etc/borgmatic/borg_key
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Get SSH key
|
|
slurp:
|
|
src: /etc/borgmatic/borg_key.pub
|
|
register: remote_key
|
|
|
|
- name: Deploy borgmatic authorized_key
|
|
template:
|
|
src: templates/borgmatic-auth-key
|
|
dest: /etc/borgmatic/authorized_keys
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
vars:
|
|
included_content: "{{ remote_key.content | b64decode }}"
|
|
|
|
- name: Pickup authorized_key
|
|
fetch:
|
|
src: /etc/borgmatic/authorized_keys
|
|
dest: authorized_keys/{{ ansible_fqdn }}
|
|
flat: yes
|
|
|
|
- name: Setup Backup Cron Job
|
|
ansible.builtin.cron:
|
|
name: "borgmatic"
|
|
minute: 0
|
|
hour: 1
|
|
job: /usr/bin/borgmatic
|