|
|
---
|
|
|
- name: generate backup config from destination
|
|
|
set_fact:
|
|
|
backup_config: "{{ backup_destination | parse_backup_destination }}"
|
|
|
|
|
|
- name: generate ssh key for root if sftp backup
|
|
|
become: yes
|
|
|
openssh_keypair:
|
|
|
path: /root/.ssh/id_rsa
|
|
|
when: backup_config.protocol == 'sftp'
|
|
|
|
|
|
- name: try to add backup server to known hosts
|
|
|
become: yes
|
|
|
command: 'ssh -o StrictHostKeyChecking=accept-new {{ backup_config.connection_string }} echo ok'
|
|
|
when: backup_config.protocol == 'sftp'
|
|
|
failed_when: false
|
|
|
|
|
|
- name: ensure restic is installed
|
|
|
become: yes
|
|
|
package:
|
|
|
name: restic
|
|
|
state: latest
|
|
|
when: ansible_distribution|lower != 'openbsd'
|
|
|
|
|
|
- name: ensure restic is installed
|
|
|
become: yes
|
|
|
community.general.openbsd_pkg:
|
|
|
name: restic
|
|
|
state: latest
|
|
|
snapshot: "{{ force_openbsd_snapshot|default(false) }}"
|
|
|
when: ansible_distribution|lower == 'openbsd'
|
|
|
|
|
|
- name: copy backup password file to remote host
|
|
|
become: yes
|
|
|
copy:
|
|
|
content: "{{ backup_password }}"
|
|
|
dest: "{{ backup_password_file }}"
|
|
|
mode: "0400"
|
|
|
owner: "{{ backup_user }}"
|
|
|
|
|
|
- name: template backup script
|
|
|
become: yes
|
|
|
template:
|
|
|
src: "backup.sh"
|
|
|
dest: "{{ backup_script_path }}"
|
|
|
owner: "{{ backup_user }}"
|
|
|
mode: "0700"
|
|
|
|
|
|
- name: create backup repository if it does not exist already
|
|
|
become: yes
|
|
|
shell: "{{ backup_init_command }}"
|
|
|
changed_when: "'created restic repositroy' in backup_init_task.stdout"
|
|
|
failed_when: "'config file already exists' not in backup_init_task.stderr and backup_init_task.rc != 0"
|
|
|
register: backup_init_task
|
|
|
|
|
|
- name: run backup
|
|
|
become: yes
|
|
|
shell: "{{ backup_job }}"
|
|
|
throttle: "{{ backup_throttle }}"
|
|
|
when: do_backup | default(false)
|
|
|
|
|
|
- name: run cleanup
|
|
|
become: yes
|
|
|
shell: "{{ backup_cleanup_job }}"
|
|
|
throttle: "{{ backup_throttle }}"
|
|
|
when: do_backup | default(false)
|
|
|
|
