105 lines
3.4 KiB
YAML
105 lines
3.4 KiB
YAML
- name: Configure local backup for Vaultwarden from remote
|
|
hosts: lapy
|
|
gather_facts: no
|
|
vars_files:
|
|
- ../../infra_vars.yml
|
|
- ./vaultwarden_vars.yml
|
|
vars:
|
|
remote_data_path: "{{ vaultwarden_data_dir }}"
|
|
|
|
tasks:
|
|
- name: Debug remote backup vars
|
|
debug:
|
|
msg:
|
|
- "remote_host={{ remote_host }}"
|
|
- "remote_user={{ remote_user }}"
|
|
- "remote_data_path='{{ remote_data_path }}'"
|
|
- "local_backup_dir={{ local_backup_dir }}"
|
|
|
|
- name: Ensure local backup directory exists
|
|
file:
|
|
path: "{{ local_backup_dir }}"
|
|
state: directory
|
|
mode: '0755'
|
|
|
|
- name: Ensure ~/.local/bin exists
|
|
file:
|
|
path: "{{ lookup('env', 'HOME') }}/.local/bin"
|
|
state: directory
|
|
mode: '0755'
|
|
|
|
- name: Create backup script
|
|
copy:
|
|
dest: "{{ backup_script_path }}"
|
|
mode: '0750'
|
|
content: |
|
|
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
TIMESTAMP=$(date +'%Y-%m-%d')
|
|
BACKUP_DIR="{{ local_backup_dir }}/$TIMESTAMP"
|
|
mkdir -p "$BACKUP_DIR"
|
|
|
|
{% if remote_key_file %}
|
|
SSH_CMD="ssh -i {{ remote_key_file }} -p {{ remote_port }}"
|
|
{% else %}
|
|
SSH_CMD="ssh -p {{ remote_port }}"
|
|
{% endif %}
|
|
|
|
rsync -az -e "$SSH_CMD" --delete {{ remote_user }}@{{ remote_host }}:{{ remote_data_path }}/ "$BACKUP_DIR/"
|
|
|
|
# Rotate old backups (keep 14 days)
|
|
# Calculate cutoff date (14 days ago) and delete backups older than that
|
|
CUTOFF_DATE=$(date -d '14 days ago' +'%Y-%m-%d')
|
|
for dir in "{{ local_backup_dir }}"/20*; do
|
|
if [ -d "$dir" ]; then
|
|
dir_date=$(basename "$dir")
|
|
if [ "$dir_date" != "$TIMESTAMP" ] && [ "$dir_date" \< "$CUTOFF_DATE" ]; then
|
|
rm -rf "$dir"
|
|
fi
|
|
fi
|
|
done
|
|
|
|
- name: Ensure cronjob for backup exists
|
|
cron:
|
|
name: "Vaultwarden backup"
|
|
user: "{{ lookup('env', 'USER') }}"
|
|
job: "{{ backup_script_path }}"
|
|
minute: 5
|
|
hour: "9,12,15,18"
|
|
|
|
- name: Run the backup script to make the first backup
|
|
command: "{{ backup_script_path }}"
|
|
|
|
- name: Verify backup was created
|
|
block:
|
|
- name: Get today's date
|
|
command: date +'%Y-%m-%d'
|
|
register: today_date
|
|
changed_when: false
|
|
|
|
- name: Check backup directory exists and contains files
|
|
stat:
|
|
path: "{{ local_backup_dir }}/{{ today_date.stdout }}"
|
|
register: backup_dir_stat
|
|
|
|
- name: Verify backup directory exists
|
|
assert:
|
|
that:
|
|
- backup_dir_stat.stat.exists
|
|
- backup_dir_stat.stat.isdir
|
|
fail_msg: "Backup directory {{ local_backup_dir }}/{{ today_date.stdout }} was not created"
|
|
success_msg: "Backup directory {{ local_backup_dir }}/{{ today_date.stdout }} exists"
|
|
|
|
- name: Check if backup directory contains files
|
|
find:
|
|
paths: "{{ local_backup_dir }}/{{ today_date.stdout }}"
|
|
recurse: yes
|
|
register: backup_files
|
|
|
|
- name: Verify backup directory is not empty
|
|
assert:
|
|
that:
|
|
- backup_files.files | length > 0
|
|
fail_msg: "Backup directory {{ local_backup_dir }}/{{ today_date.stdout }} exists but is empty"
|
|
success_msg: "Backup directory contains {{ backup_files.files | length }} file(s)"
|