dd960dcf4e
* add full path
* Update Readme.me: reorder optional Arguments, update cron -> systemd timer
* remove ssh_key_file; change cron to timer
* Removed cronie from package installation because systemd timer is used
* docker.sh - Stops all or selected containers to save the persistent data intact. The containers are started in reverse order
* Created arguments_specs.yml
* Role restructured:
- if needed creation of a service user incl. creation of the ssh-key,
- add the ssh key to authorized_keys,
- auto init of the repos,
- creation and start of systemd timer and services and
- installation of the Docker helperscript.
* restructure role add import logic
* cleanup: user backup_user
* - "borg_source_directories" is not longer a required Argument
- add "borg_keys_directory" to load key from Service user during starting borgmatic by sudo
* Add borgmatic_initialization_repo (bool) as option to disable init of repo
* cleanup
* fix ansible-lint errors and warnings
* fix letter turner
* add option: borgmatic_timer
* add:
- borgmatic_timer_systemd: true
readd:
- borgmatic_cron_name: "borgmatic"
* - renamed borgmatic_cron_name to borgmatic_timer_cron_name to be more convergent.
- Change recommendations implemented by m3nu so that creation of a timer (systemd or cron) is optional and can be selected via borgmatic_timer.
* Add description to borgmatic_timer_cron_name and borgmatic_timer
* Add variable borg_cron_package to install the cron-packages in case of using timer: cron
* reworked timer install logic
* reworked timer install logic
* Add comments for running backup with service account
* add new parameters for tests
* Switch created to perform the backup as root or service account. If a service account is to be used, it will be created.
* Refactored: Check for ssh-key if not present, genereate them.
* Refactored
* Refactored
* renamed tasks/03_configure.yml to tasks/04_create_links_to_borg_and_borgmatic.yml
* Refactored
* Refactored
* add example for service account
* Update Python version for testing
* No auto init
* Add description to install_backup
* Add description to install_backup
* set coverage back to: m3nu.ansible_role_borgbackup
* The initialization of the repository must be activated and does not take place automatically.
* The initialization of the repository must be activated and does not take place automatically.
* Removed install_backup as var (bool) to prevent that this role run
* Rename backup_ssh_command to borg_ssh_command, tis was a double definition
* Renamed backup_repository to borg_repository and add better explanations
* remove copy ssh-keys and cert parts
* Add comments to borg_ssh_key_file and borg_ssh_key_type
* Set allways the borg_ssh_key_file and borg_ssh_command to load the right ssh-key. Add borg_ssh_key_type to select the key type by user
* Add borg_ssh_key_type
* renamed id_rsa to backup
* generate ssh-keys (backup and backup.pub) and add better explanation
* Print out key if borgmatic_initialization_repo is false
* Remove 'su - {{ borgbackup_user }} -c' to execute the borgmatic by the right user
* Add Check frequency, therefore, we no longer need to distinguish between normal and large repos
* Add link to Article
* renamed backup_ssh_command and backup_ssh_key_file to borg_ssh_command and borg_ssh_key_file
* Removed: borgmatic_initialization_repo
* Removed: borgmatic_initialization_repo
* Removed: borgmatic_initialization_repo
* revert changes
* Add Full Automation
* polishing
* rename backup.timer and bakup.service to borgmatic.timer and borgmatic.service
* remove debug
* Try to find services in ansible_facts
* Forgot to install Cron
* change borg_ssh_key_type to ed25519
* remove conditional checks
* - add hint to using a service user
- renamed: borg_ssh_key_file to borg_ssh_key_file_path
- removed advanced example
* add borg_ssh_key_name, renamed borg_ssh_key_file to borg_ssh_key_file_path
* removed static pointing to ~/.ssh/backup SSH private key
* Add README-Advanced-Examples.md for storing more examples
* Fix test idempotence
* Dont symlink when using distro packages
* Remove old test targets, consistent wording, remove tag
* Remove helper scripts, fix absolute path
* Fix cron job, add assert to prevent duplicate timers
* nit-pick
* Create bin links as root, no borg_ssh_command by default.
* Add breaking changes note to README
---------
Co-authored-by: Manu <manu@snapdragon.cc>
183 lines
7.0 KiB
YAML
183 lines
7.0 KiB
YAML
argument_specs:
|
|
main:
|
|
# https://docs.ansible.com/ansible/latest/user_guide/playbooks_reuse_roles.html#role-argument-validation
|
|
# https://docs.ansible.com/ansible/latest/dev_guide/developing_program_flow_modules.html#argument-spec
|
|
short_description: Role to install borgbackup and borgmatic.
|
|
description: Role to install borgbackup and borgmatic
|
|
author:
|
|
- 2018-2020 Manuel Riel and contributors.
|
|
- Frank Dornheim
|
|
options:
|
|
borg_dep_packages:
|
|
type: str
|
|
required: false
|
|
description: Dependancy Packages to install borg(backup) and borgmatic.
|
|
borg_distro_packages:
|
|
type: str
|
|
required: false
|
|
description: |
|
|
Contains the names of distributions packages for borg(backup) and borgmatic,
|
|
only used if `borg_install_method` is set to package
|
|
borg_pip_packages:
|
|
type: str
|
|
required: false
|
|
description: Dependancy Packages (pip) to install borg(backup) and borgmatic.
|
|
borg_venv_path:
|
|
type: str
|
|
required: false
|
|
description: Path to store the venv for borg(backup) and borgmatic.
|
|
borg_install_method:
|
|
type: str
|
|
required: false
|
|
default: pip
|
|
description: |
|
|
By default pip is used to install borgmatic.
|
|
To install via your distributions package manager set this to package and (if needed)
|
|
overwrite the borg_distro_packages variable to contain your distributions package names
|
|
required to install borgmatic.
|
|
Note that many distributions ship outdated versions of borgbackup and borgmatic; use at your own risk.
|
|
borgmatic_config_name:
|
|
type: str
|
|
required: false
|
|
default: config.yaml
|
|
description: Name to use for the borgmatic config file.
|
|
borg_user:
|
|
type: str
|
|
default: root
|
|
description: Name of the User to create Backups (Service Account)
|
|
borg_group:
|
|
type: str
|
|
default: root
|
|
description: Name of the Group to create Backups (Service Account)
|
|
borg_source_directories:
|
|
type: List
|
|
default: "/etc/hostname"
|
|
required: false
|
|
description: List of local folders to back up.
|
|
borg_one_file_system:
|
|
type: str
|
|
required: false
|
|
description: Don't cross file-system boundaries.
|
|
borg_repository:
|
|
type: List
|
|
required: true
|
|
description: |
|
|
Full path to repository.
|
|
Your own server or [BorgBase.com](https://www.borgbase.com) repo.
|
|
Not required when using auto creation of repositories.
|
|
Can be a list if you want to backup to multiple repositories.
|
|
borgmatic_store_atime:
|
|
type: bool
|
|
required: false
|
|
description: Store atime into archive.
|
|
borgmatic_store_ctime:
|
|
type: bool
|
|
required: false
|
|
description: Store ctime into archive.
|
|
borg_exclude_patterns:
|
|
type: List
|
|
required: false
|
|
description: Any paths matching these patterns are excluded from backups. Globs and tildes are expanded.
|
|
borg_exclude_from:
|
|
type: List
|
|
required: false
|
|
description: Read exclude patterns from one or more separate named files, one pattern per line.
|
|
borg_remote_path:
|
|
type: str
|
|
required: false
|
|
description: Alternate Borg remote executable. Defaults to "borg"
|
|
borg_encryption_passphrase:
|
|
type: str
|
|
description: |
|
|
The standard output of this command is used to unlock the encryption key.
|
|
Only use on repositories that were initialized with passcommand/repokey encryption.
|
|
Note that if both encryption_passcommand and encryption_passphrase are set,
|
|
then encryption_passphrase takes precedence.
|
|
borg_encryption_passcommand:
|
|
type: str
|
|
required: false
|
|
description: secret-tool lookup borg-repository repo-name
|
|
borg_remote_rate_limit:
|
|
type: int
|
|
required: false
|
|
description: Remote network upload rate limit in kiBytes/second.
|
|
borg_ssh_key_file_path:
|
|
type: str
|
|
required: false
|
|
description: Path to ssh-key
|
|
borg_ssh_command:
|
|
type: str
|
|
description: Command to use instead of just ssh. This can be used to specify ssh options.
|
|
borg_lock_wait_time:
|
|
type: int
|
|
description: Maximum seconds to wait for acquiring a repository/cache lock.
|
|
borgmatic_relocated_repo_access_is_ok:
|
|
type: bool
|
|
description: Bypass Borg error about a repository that has been moved.
|
|
borg_retention_policy:
|
|
keep_secondly:
|
|
type: int
|
|
required: false
|
|
description: Number of secondly archives to keep.
|
|
keep_minutely:
|
|
type: int
|
|
required: false
|
|
description: Number of minutely archives to keep.
|
|
keep_hourly:
|
|
type: int
|
|
required: false
|
|
description: Number of hourly archives to keep.
|
|
keep_daily:
|
|
type: int
|
|
required: false
|
|
description: Number of daily archives to keep.
|
|
keep_weekly:
|
|
type: int
|
|
required: false
|
|
description: Number of weekly archives to keep.
|
|
keep_monthly:
|
|
type: int
|
|
required: false
|
|
description: Number of monthly archives to keep.
|
|
keep_yearly:
|
|
type: int
|
|
required: false
|
|
description: Number of yearly archives to keep.
|
|
borgmatic_checks:
|
|
type: List
|
|
required: false
|
|
description: |
|
|
List of one or more consistency checks to run
|
|
"repository", "archives", "data", and/or "extract".
|
|
Defaults to "repository" and "archives".
|
|
Set to "disabled" to disable all consistency checks.
|
|
"repository" checks the consistency of the repository,
|
|
"archives" checks all of the archives, "data" verifies
|
|
the integrity of the data within the archives, and
|
|
"extract" does an extraction dry-run of the most recent archive.
|
|
Note that "data" implies "archives".
|
|
borgmatic_check_last:
|
|
type: int
|
|
required: false
|
|
description: Restrict the number of checked archives to the last n. Applies only to the "archives" check.
|
|
borgmatic_hooks:
|
|
type: dict
|
|
required: false
|
|
description: Shell commands or scripts to execute before and after a backup or if an error has occurred.
|
|
borgmatic_timer_cron_name:
|
|
type: str
|
|
required: false
|
|
description: Name of the cron Job
|
|
borgmatic_timer:
|
|
type: str
|
|
required: false
|
|
description: If the variable is set, a timer is installed. A choice must be made between "cron" and "systemd".
|
|
borg_ssh_key_type:
|
|
type: str
|
|
required: false
|
|
description: The algorithm used to generate the SSH private key
|
|
borg_ssh_key_name:
|
|
type: str
|
|
required: false
|
|
description: Name of the SSH public and private key
|