Setup borg backup server

ansible/inventories/distributed.yaml

@@ -4,7 +4,7 @@ new_sudo:
     hserve1:
     hserve2:
     mini1:
-
+    backs.hassallab.it:
 
 
 distributed:
@@ -28,4 +28,7 @@ distributed:
     forgejo:
       hosts:
         hserve1:
+    borg:
+      hosts:
+        backs.hassallab.it:
 

ansible/inventories/group_vars/all/borg.yaml

@@ -0,0 +1,4 @@
+---
+borg_user: borg
+borg_backup_server: backs.hassallab.it
+borg_repo_base_path: "ssh://{{ borg_user }}@{{ borg_backup_server }}/./"

ansible/inventories/group_vars/borg/auth_users.yaml

@@ -0,0 +1,3 @@
+# auth_users:
+#   - host: johndoe.clnt.local
+#     key: "{{ lookup('file', '/path/to/keys/johndoe.clnt.local.pub') }}"

ansible/playbooks/borg_server.yaml

@@ -0,0 +1,28 @@
+---
+- hosts: backup01.srv.local
+  vars:
+    user: backup
+    group: backup
+    home: /home/backup
+    pool: "{{ home }}/repos"
+    auth_users:
+      - host: johndoe.clnt.local
+        key: "{{ lookup('file', '/path/to/keys/johndoe.clnt.local.pub') }}"
+      - host: web01.clnt.local
+        key: "{{ lookup('file', '/path/to/keys/web01.clnt.local.pub') }}"
+      - host: app01.clnt.local
+        key: "{{ lookup('file', '/path/to/keys/app01.clnt.local.pub') }}"
+  tasks:
+  - package: name=borg state=present
+  - group: name="{{ group }}" state=present
+  - user: name="{{ user }}" shell=/bin/bash home="{{ home }}" createhome=yes group="{{ group }}" groups= state=present
+  - file: path="{{ home }}" owner="{{ user }}" group="{{ group }}" mode=0700 state=directory
+  - file: path="{{ home }}/.ssh" owner="{{ user }}" group="{{ group }}" mode=0700 state=directory
+  - file: path="{{ pool }}" owner="{{ user }}" group="{{ group }}" mode=0700 state=directory
+  - authorized_key: user="{{ user }}"
+                    key="{{ item.key }}"
+                    key_options='command="cd {{ pool }}/{{ item.host }};borg serve --restrict-to-path {{ pool }}/{{ item.host }}",restrict'
+    with_items: "{{ auth_users }}"
+  - file: path="{{ home }}/.ssh/authorized_keys" owner="{{ user }}" group="{{ group }}" mode=0600 state=file
+  - file: path="{{ pool }}/{{ item.host }}" owner="{{ user }}" group="{{ group }}" mode=0700 state=directory
+    with_items: "{{ auth_users }}"

ansible/playbooks/roles/borg/defaults/main.yaml

@@ -0,0 +1,10 @@
+---
+borg_user: borg
+borg_group: borg
+borg_home: /home/borg
+borg_pool: "{{ borg_home }}/repos"
+borg_pool_dest : /usr/backups/borg_repos
+auth_users:
+      - host: hserve1
+        # Chiave di esempio per test
+        key: "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArNhKFcJ6T08sn7kTTLf+rO9HEvgOvqfhv5HQ2sRf2tFYfjfCb0zHKnMkgW+sy5gMU10Lyx1r7juXCvqRC955uIM97m1B1Xc6sVqASVKuGPhCKfhxEaMAyBcWFdE+HYbCOPYVN+JMrcwWfbblwiZTtK1OCqaEUvDDI7cFeU68noXwggEp46T48eqMUdi541D9Y+BVx9HYAo6OCQz0+6eXwxJL+tpRcAAXIMMWv362CYHoOgIU45R7xVSMLY1k/HLrcEAblwxEaSpduCH5cWUXZE/56IyxpvP44BxZkVhNdqJLmg4hxBQWhoMNYiTZxbLay3W2TwBCM111cAtUx4M/jQ=="

ansible/playbooks/roles/borg/tasks/configure_borg_server.yaml

@@ -0,0 +1,46 @@
+---
+- name: Set borg user group
+  group: 
+    name: "{{ borg_group }}" 
+    state: present
+
+- name: Set borg user
+  user: 
+    name: "{{ borg_user }}" 
+    shell: /bin/bash 
+    home: "{{ borg_home }}" 
+    createhome: yes 
+    group: "{{ borg_group }}" 
+    state: present
+
+- name: Set home directory 
+  file: 
+    path: "{{ borg_home }}" 
+    owner: "{{ borg_user }}" 
+    group: "{{ borg_group }}" 
+    mode: "0700" 
+    state: directory
+
+- name: Set ssh directory 
+  file: 
+    path: "{{ borg_home }}/.ssh" 
+    owner: "{{ borg_user }}" 
+    group: "{{ borg_group }}" 
+    mode: "0700" 
+    state: directory
+
+- name: Set pool directory link
+  file:
+    src: "{{ borg_pool }}" 
+    dest: "{{ borg_pool_dest }}" 
+    state: link 
+
+ 
+- name: Add authorized keys 
+  authorized_key: 
+    user: "{{ borg_user }}"
+    key: "{{ item.key }}"
+    key_options: "command=cd {{ borg_pool }}/{{ item.host }};borg serve --restrict-to-path {{ borg_pool }}/{{ item.host }},restrict"
+  with_items: "{{ borg_auth_users }}"
+
+

ansible/playbooks/roles/borg/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+include_tasks: prepare_borg.yaml
+include_tasks: configure_borg_server.yaml
+  when:
+    - configure_borg_server
+include_tasks: configure_borg_client.yaml
+  when: 
+    - configure_borg_client

ansible/playbooks/roles/borg/tasks/prepare_borg.yaml

@@ -0,0 +1,6 @@
+---
+- name: Install borg and requirements 
+- package: 
+    name: borg 
+    state: present
+