49 lines
1.1 KiB
YAML
49 lines
1.1 KiB
YAML
- name: Ensure rsync is installed
|
|
package:
|
|
name: rsync
|
|
state: present
|
|
|
|
- name: Create backup root
|
|
file:
|
|
path: "{{ backup_root }}"
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: "0700"
|
|
|
|
- name: Generate pull ssh key
|
|
command:
|
|
cmd: ssh-keygen -t ed25519 -N "" -C aurbis-backup-pull -f {{ backup_key_path }}
|
|
creates: "{{ backup_key_path }}"
|
|
|
|
- name: Read pull public key
|
|
slurp:
|
|
src: "{{ backup_key_path }}.pub"
|
|
register: backup_pubkey_slurp
|
|
|
|
- name: Export public key as fact for the source hosts
|
|
set_fact:
|
|
aurbis_backup_pubkey: "{{ backup_pubkey_slurp.content | b64decode | trim }}"
|
|
|
|
- name: Install pull script
|
|
template:
|
|
src: backup/aurbis-backup-pull.sh.j2
|
|
dest: /usr/local/bin/aurbis-backup-pull
|
|
mode: "0750"
|
|
|
|
- name: Install pull service and timer
|
|
copy:
|
|
src: "backup/{{ item }}"
|
|
dest: /etc/systemd/system/
|
|
mode: "0644"
|
|
with_items:
|
|
- aurbis-backup-pull.service
|
|
- aurbis-backup-pull.timer
|
|
|
|
- name: Enable pull timer
|
|
systemd:
|
|
name: aurbis-backup-pull.timer
|
|
enabled: yes
|
|
state: started
|
|
daemon_reload: yes
|