client user

This commit is contained in:
Luc Stroobant 2018-01-28 18:01:15 +01:00
parent 645694e411
commit 443b5b4ee5
3 changed files with 13 additions and 8 deletions

View File

@ -1,7 +1,8 @@
--- ---
borgbackup_required: True borgbackup_required: True
borgbackup_ssh_key: "~/.ssh/id_borg_rsa" borgbackup_client_user: root
borgbackup_ssh_key: "~{{ borgbackup_client_user }}/.ssh/id_borg_rsa"
borgbackup_version: "1.0.11" borgbackup_version: "1.0.11"
borgbackup_checksum: "sha256:fbdc0e0d6d05a0935551f2f408f370236a76b7a30d3bb90a31c3628fe3611359" borgbackup_checksum: "sha256:fbdc0e0d6d05a0935551f2f408f370236a76b7a30d3bb90a31c3628fe3611359"
@ -28,7 +29,6 @@ borgbackup_retention:
monthly: 6 monthly: 6
yearly: 1 yearly: 1
borgbackup_cron_user: root
borgbackup_cron_day: "*" borgbackup_cron_day: "*"
borgbackup_cron_hour: "{{ 5|random }}" borgbackup_cron_hour: "{{ 5|random }}"
borgbackup_cron_minute: "{{ 59|random }}" borgbackup_cron_minute: "{{ 59|random }}"

View File

@ -1,6 +1,11 @@
--- ---
- name: client | generate ssh key for this machine - name: client | generate ssh key for this machine
shell: if [ -f {{ borgbackup_ssh_key }} ]; then rm -f {{ borgbackup_ssh_key }}; fi && ssh-keygen -q -t rsa -b 4096 -f {{ borgbackup_ssh_key }} -N "" creates="{{ borgbackup_ssh_key }}.pub" user:
name: "{{ borgbackup_client_user }}"
generate_ssh_key: yes
ssh_key_bits: 2048
ssh_key_file: "{{ borgbackup_ssh_key }}"
ssh_key_type: rsa
- name: client | fetch ssh-key - name: client | fetch ssh-key
shell: "cat {{ borgbackup_ssh_key }}.pub" shell: "cat {{ borgbackup_ssh_key }}.pub"
@ -9,14 +14,14 @@
- name: client | write passphrase - name: client | write passphrase
lineinfile: lineinfile:
dest: "/root/.borg.passphrase" dest: "~{{ borgbackup_client_user }}/.borg.passphrase"
state: "present" state: "present"
line: 'export BORG_PASSPHRASE="{{ borgbackup_passphrase }}"' line: 'export BORG_PASSPHRASE="{{ borgbackup_passphrase }}"'
create: "yes" create: "yes"
- name: client | disable strict key checking for backup servers - name: client | disable strict key checking for backup servers
blockinfile: blockinfile:
dest: /root/.ssh/config dest: "~{{ borgbackup_client_user }}/.ssh/config"
create: yes create: yes
marker: "### {mark} ANSIBLE MANAGED BLOCK {{ item.fqdn }} ###" marker: "### {mark} ANSIBLE MANAGED BLOCK {{ item.fqdn }} ###"
content: | content: |
@ -96,7 +101,7 @@
- name: client | create backup cronjob - name: client | create backup cronjob
cron: cron:
cron_file: "borg-backup" cron_file: "borg-backup"
user: "{{ borgbackup_cron_user }}" user: "{{ borgbackup_client_user }}"
name: "borg-backup" name: "borg-backup"
minute: "{{ borgbackup_cron_minute }}" minute: "{{ borgbackup_cron_minute }}"
hour: "{{ borgbackup_cron_hour }}" hour: "{{ borgbackup_cron_hour }}"

View File

@ -7,7 +7,7 @@ fi
# Sourcing the backup-passphrase # Sourcing the backup-passphrase
. /root/.borg.passphrase . ~{{ borgbackup_client_user }}/.borg.passphrase
# Small helper commands, like listing backups, will help us in the future :) # Small helper commands, like listing backups, will help us in the future :)
@ -48,7 +48,7 @@ if [ "$1" = "init" ]
then then
{% for b in borgbackup_servers %} {% for b in borgbackup_servers %}
REPOSITORY={% if b.type == 'hetzner' %}ssh://{% endif %}{{ b.user }}@{{ b.fqdn }}:{% if b.type == 'hetzner' %}23/./{% endif %}{{ b.home }}{{ b.pool }}/{{ inventory_hostname }} REPOSITORY={% if b.type == 'hetzner' %}ssh://{% endif %}{{ b.user }}@{{ b.fqdn }}:{% if b.type == 'hetzner' %}23/./{% endif %}{{ b.home }}{{ b.pool }}/{{ inventory_hostname }}
/usr/local/bin/borg init $REPOSITORY {{ b.options }} /usr/local/bin/borg init --encryption=keyfile $REPOSITORY {{ b.options }}
{% endfor %} {% endfor %}
exit 0 exit 0
fi fi