An Ansible deployment to manage backups for Windmill.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

80 lines
2.7 KiB

# Copyright 2019 Red Hat, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
---
- name: Install borg-client
hosts: borg-client:!disabled
tasks:
- name: Setup openstack.borgbackup role
include_role:
name: openstack.borgbackup
vars:
borgbackup_task_manager:
- pre
- install
- name: Setup openstack.borgmatic role
include_role:
name: openstack.borgmatic
- name: Generage borgbackup SSH keys
become: true
become_user: borgbackup
command: ssh-keygen -b 4096 -t rsa -f ~/.ssh/id_rsa -q -N ""
args:
creates: ~/.ssh/id_rsa
- name: Add borg-server SSH host keys to known_hosts
become: true
become_user: borgbackup
known_hosts:
hash_host: true
key: "{{ hostvars[item].ansible_host }} ssh-ed25519 {{ hostvars[item].ansible_facts['ssh_host_key_ed25519_public'] }}"
name: "{{ hostvars[item].ansible_host }}"
with_inventory_hostnames:
- borg-server:!disabled
- name: Read SSH public key
become: true
become_user: borgbackup
slurp:
src: ~/.ssh/id_rsa.pub
register: borg_id_rsa_pub
- name: Setup openstack.ssh role
become: true
become_user: "borg_{{ inventory_hostname_short }}"
include_role:
name: openstack.ssh
apply:
delegate_to: "{{ item }}"
vars:
ssh_task_manager:
- config
ssh_authorized_keys_content: "restrict,command=\"cd ~/repos;{{ borgbackup_pip_virtualenv }}/bin/borg serve --restrict-to-path ~/repos\" {{ borg_id_rsa_pub.content | b64decode | trim }}"
ssh_key_private_content: false
ssh_key_public_content: false
ssh_known_hosts_content: false
ssh_user_home: "/opt/backups/borg_{{ inventory_hostname_short }}"
ssh_user_name: "borg_{{ inventory_hostname_short }}"
ssh_user_group: borgbackup
with_inventory_hostnames:
- borg-server:!disabled
- name: Initialize an empty borg repository
become: true
become_user: borgbackup
command: "{{ borgmatic_pip_virtualenv }}/bin/borgmatic --init --encryption repokey"
register: r
changed_when: r.stderr | length > 0