make it work on infra.opendoor.fr

tasks/cleanup.yml

@@ -1,6 +0,0 @@
----
-- name: remove old cron entry
-  lineinfile:
-    path: /etc/crontab
-    regexp: '.*/root/bin/borg.sh.*'
-    state: absent

tasks/cron.yml

@@ -1,25 +1,3 @@
-- name: Deploy cronjob backup_temoin
-  vars:
-    minutes: "{{ 59 | random(seed=inventory_hostname) }}"
-  cron:
-    name: backup_temoin
-    cron_file: backup_temoin
-    user: root
-    hour: "7"
-    minute: "{{ minutes }}"
-    job: "/bin/touch /root/temoinbackup"
-
-- name: Deploy cronjob backup_extract
-  vars:
-    minutes: "{{ 59 | random(seed=inventory_hostname) }}"
-  cron:
-    name: backup_extract
-    cron_file: backup_extract
-    user: root
-    hour: "8"
-    minute: "{{ minutes }}"
-    job: 'cd /tmp/ ; {{ borg_script_dir }}/borg.sh extract {{ ansible_hostname }}_$( date +\%Y\%m\%d) root/temoinbackup ; chmod 755 /tmp/root'
-
 - name: Deploy cronjob backup_tout_court
   vars:
     minutes: "{{ 59 | random(seed=inventory_hostname) }}"

tasks/install.yml

@@ -1,20 +1,32 @@
 ---
+- name: configure ssh
+  block:
+  - name: .ssh dir
+    ansible.builtin.file:
+      path: /root/.ssh
+      mode: 0700
+      state: directory
+  - name: .ssh/confi 
+    ansible.builtin.copy:
+      dest: /root/.ssh/config
+      content: |
+        Host *
+          Port 2222
+
 - name: get borg binary
   get_url:
     dest: /usr/bin/borg
     owner: root
-    group: backup
-    mode: "0750"
-    url: https://github.com/borgbackup/borg/releases/download/{{ borg_release }}/borg-linux64
+    mode: "0755"
+    url: https://github.com/borgbackup/borg/releases/download/{{ borg_release }}/borg-linuxnew64
 
 - name: ensure /root/bin exists
-  file:
+  ansible.builtin.file:
     path: "{{ borg_script_dir }}"
     state: directory
 
 - name: get borgbackup script
-  tags: wip
-  get_url:
+  ansible.builtin.get_url:
     url: "{{ item.url }}"
     mode: "{{ item.mode }}"
     dest: "{{ borg_script_dir }}"
@@ -22,7 +34,9 @@
   - { url: "https://git.hadoly.fr/CS_CT/borg/raw/tag/1.0/borg.sh", mode: "0700" }
 
 - name: get borgbackup config
-  template:
+  vars:
+    borg_dirs_serialized: "{{ borg_dirs | join( ' ' ) }}"
+  ansible.builtin.template:
     src: borg.conf.jj
     dest: "{{ borg_script_dir }}/borg.conf"
     mode: 0600

tasks/main.yml

@@ -1,6 +1,5 @@
 ---
 # tasks file for borg_client
-- include_tasks: cleanup.yml
 - include_tasks: install.yml
 - include_tasks: cron.yml
 - include_tasks: repo.yml

tasks/repo.yml

@@ -4,17 +4,17 @@
 # * configure authorized key for backup user
 - name: create root ssh private key
   openssh_keypair:
-    comment: "passwordless access to vm2, as backup user"
+    comment: "passwordless access to {{ borg_server }}, as backup user"
     path: /root/.ssh/id_rsa
     owner: root
     group: root
 
 - name: create repo
   file:
-    path: "/var/backups/borg/{{ ansible_hostname }}"
+    path: "{{ borg_remote_dir }}{{ inventory_hostname }}"
     state: directory
-    owner: backup
-    group: backup
+    owner: "{{ borg_account }}"
+    group:  "{{ borg_account }}"
   delegate_to: "{{ borg_server }}"
 
 - name: get public key
@@ -28,12 +28,26 @@
 # can't use authorized_key module here
 - name: install ssh key
   lineinfile:
-    path: /var/backups/.ssh/authorized_keys
-    line: 'command="borg serve --restrict-to-path /var/backups/borg/" {{ public_key }} from {{ ansible_hostname }}'
+    path: "{{ borg_remote_dir }}/.ssh/authorized_keys"
+    line: 'command="borg serve --restrict-to-path {{ borg_remote_dir }}" {{ public_key }} from {{ inventory_hostname }}'
     create: true
-    owner: backup
-    group: backup
+    owner: "{{ borg_account }}"
+    group: "{{ borg_account }}"
     mode: 0600
   delegate_to: "{{ borg_server }}"
 
+- name: check if repository is created
+  tags: wip
+  delegate_to: "{{ borg_server }}"
+  ansible.builtin.stat:
+    path: "{{ borg_remote_dir }}{{ inventory_hostname }}/config"
+  register: repo_content
+
+- name: create repository
+  tags: wip
+  when: repo_content.stat.isfile is not defined
+  ansible.builtin.command: "/usr/bin/borg init --encryption=keyfile {{ borg_account }}@{{ borg_server }}:{{ borg_remote_dir }}{{ inventory_hostname }}"
+  environment:
+    BORG_PASSPHRASE: "{{ borg_passphrase }}"
+