second commit

ansible/roles/backup/tasks/main.yml

@@ -0,0 +1,47 @@
+---
+- name: Backup-Verzeichnis anlegen
+  ansible.builtin.file:
+    path: "{{ backup_dir }}"
+    state: directory
+    owner: "{{ jumphost_app_user }}"
+    group: "{{ jumphost_app_group }}"
+    mode: "0700"
+
+- name: age installieren (Backup-Verschluesselung)
+  ansible.builtin.apt:
+    name: age
+    state: present
+    update_cache: true
+
+- name: Backup-Skript ausrollen
+  ansible.builtin.template:
+    src: backup.sh.j2
+    dest: "{{ jumphost_home }}/scripts/backup.sh"
+    owner: "{{ jumphost_app_user }}"
+    group: "{{ jumphost_app_group }}"
+    mode: "0750"
+
+- name: systemd-Service fuer Backup ausrollen
+  ansible.builtin.template:
+    src: jumphost-backup.service.j2
+    dest: /etc/systemd/system/jumphost-backup.service
+    owner: root
+    group: root
+    mode: "0644"
+  notify: reload systemd
+
+- name: systemd-Timer fuer Backup ausrollen
+  ansible.builtin.template:
+    src: jumphost-backup.timer.j2
+    dest: /etc/systemd/system/jumphost-backup.timer
+    owner: root
+    group: root
+    mode: "0644"
+  notify: reload systemd
+
+- name: Backup-Timer aktivieren
+  ansible.builtin.systemd:
+    name: jumphost-backup.timer
+    daemon_reload: true
+    enabled: true
+    state: started