Initial commit

tasks/config.yaml

@@ -0,0 +1,30 @@
+---
+- name: Create /etc/borgmatic folder
+  ansible.builtin.file:
+    path: /etc/borgmatic
+    state: directory
+    owner: root
+    group: root
+    mode: "0700"
+- name: Write borgmatic config
+  template:
+    src: config.yaml.j2
+    dest: /etc/borgmatic/config.yaml
+    owner: root
+    group: root
+    mode: "0600"
+- name: Create /root/.borgmatic folder
+  ansible.builtin.file:
+    path: /root/.borgmatic
+    state: directory
+    owner: root
+    group: root
+    mode: "0700"
+- name: "Copy SSH key {{ item }} to borgmatic config folder"
+  ansible.builtin.copy:
+    src: "ssh_keys/{{ item }}"
+    dest: "/etc/borgmatic/{{ item }}"
+    owner: root
+    group: root
+    mode: "0600"
+  loop: "{{ borgmatic_ssh_keys }}"

tasks/init.yaml

@@ -0,0 +1,12 @@
+---
+- name: Initialize borg check_repositories
+  ansible.builtin.command: "/usr/local/bin/borgmatic init --encryption repokey"  # noqa 301
+  no_log: true
+  async: 300
+  poll: 0
+- name: Enable borgmatic.timer
+  ansible.builtin.systemd:
+    name: borgmatic.timer
+    enabled: true
+    masked: false
+    state: started

tasks/install.yaml

@@ -0,0 +1,25 @@
+---
+- name: Install BorgBackup
+  ansible.builtin.package:
+    name: "{{ packages }}"
+    state: installed
+  vars:
+    packages:
+      - borgbackup
+- name: Install Borgmatic
+  ansible.builtin.pip:
+    name: "{{ packages }}"
+  vars:
+    packages:
+      - borgmatic
+- name: Add borgmatic systemd units
+  ansible.builtin.copy:
+    src: "systemd/{{ item }}"
+    dest: "/etc/systemd/system/{{ item }}"
+    owner: root
+    group: root
+    mode: "0644"
+  notify: reload systemd
+  loop:
+    - borgmatic.service
+    - borgmatic.timer

tasks/main.yaml

@@ -0,0 +1,4 @@
+---
+- include: install.yaml
+- include: config.yaml
+- include: init.yaml