#!/bin/bash

# This script is intended to run on a trusted management station to purge borg repo's in
# append-only mode.
# Don't put it on the backup server, it contains all borg secrets!

{% for h in groups['all'] %}
  {% if hostvars[h].borgbackup_required is defined and hostvars[h].borgbackup_required %}
      # Host: {{ h }}
    {% for b in hostvars[h].backupservers %}
      {% if hostvars[h].borgbackup_managementstation is defined and inventory_hostname == hostvars[h].borgbackup_managementstation %}
      export BORG_PASSPHRASE={{ hostvars[h].borgbackup_passphrase }}
      REPOSITORY={{ b.user }}@{{ b.fqdn }}:{{ b.home }}{{ b.pool }}/{{ h }}
      /usr/local/bin/borg prune -v $REPOSITORY {{ b.options }} -H {{ hostvars[h].borgbackup_retention.hourly }} -d {{ hostvars[h].borgbackup_retention.daily }} -w {{ hostvars[h].borgbackup_retention.weekly }} -m {{ hostvars[h].borgbackup_retention.monthly }} -y {{ hostvars[h].borgbackup_retention.yearly }}

      {% endif %}
    {% endfor %}
  {% endif %}
{% endfor %}