From 1abdf7268e29d967452aee13ceec298066721ec3 Mon Sep 17 00:00:00 2001
From: Vladimir Still <git@vstill.eu>
Date: Fri, 11 Feb 2022 11:30:52 +0100
Subject: [PATCH] ansible: Backup-tar on skund
---
ansible/skund.yml | 52 +++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 52 insertions(+)
diff --git a/ansible/skund.yml b/ansible/skund.yml
index fd7d52e..af77cbd 100644
--- a/ansible/skund.yml
+++ b/ansible/skund.yml
@@ -9,6 +9,8 @@
# Samba (local nets only)
ip saddr 192.168.0.0/21 tcp dport { 139, 445 } accept
ip saddr 192.168.0.0/21 tcp dport { 137, 138 } accept
+ backup_users:
+ - name: skund
tasks:
- fail:
@@ -111,3 +113,53 @@
public: true
writeable: true
+ - name: "Obtain root's SSH public key"
+ user:
+ name: root
+ generate_ssh_key: true
+ ssh_key_type: ed25519
+ register: root_user
+
+ - name: "Backups"
+ block:
+ - name: "Backup group"
+ group:
+ name: 'backup-remote'
+ system: true
+
+ - name: "Backup users"
+ user:
+ name: 'backup-{{item.name}}'
+ system: true
+ create_home: true
+ move_home: true
+ home: '/backup/{{item.name}}'
+ group: 'backup-remote'
+ shell: /bin/bash
+ loop: "{{backup_users}}"
+
+
+ - name: "Backup script"
+ copy:
+ src: "../backup-tar/backup.sh"
+ dest: "/usr/sbin/backup-tar"
+ mode: "u=rx,g=,o="
+
+ - name: "Backup config"
+ copy:
+ content: |
+ TARGET=backup-skund@127.0.0.1
+ SOURCES="/home/xstill/sync /home/xstill/recepty /home/xstill/_config /home/xstill/notes /data/xstill/repo-t14"
+ dest: "/backup/skund/backup-tar.config"
+
+ - name: "Authorized key for backup-skund"
+ ansible.posix.authorized_key:
+ key: "{{root_user.ssh_public_key}}"
+ user: "backup-skund"
+
+ - name: "Cron monitoring setup – jobs"
+ cron:
+ user: "root"
+ name: "backup-tar"
+ special_time: "daily"
+ job: "/usr/sbin/backup-tar /backup/skund/backup-tar.config"
--
GitLab