---
- name: Backup-Verzeichnis anlegen
  ansible.builtin.file:
    path: "{{ backup_dir }}"
    state: directory
    owner: "{{ jumphost_app_user }}"
    group: "{{ jumphost_app_group }}"
    mode: "0700"

- name: age installieren (Backup-Verschluesselung)
  ansible.builtin.apt:
    name: age
    state: present
    update_cache: true

- name: Backup-Skript ausrollen
  ansible.builtin.template:
    src: backup.sh.j2
    dest: "{{ jumphost_home }}/scripts/backup.sh"
    owner: "{{ jumphost_app_user }}"
    group: "{{ jumphost_app_group }}"
    mode: "0750"

- name: systemd-Service fuer Backup ausrollen
  ansible.builtin.template:
    src: jumphost-backup.service.j2
    dest: /etc/systemd/system/jumphost-backup.service
    owner: root
    group: root
    mode: "0644"
  notify: reload systemd

- name: systemd-Timer fuer Backup ausrollen
  ansible.builtin.template:
    src: jumphost-backup.timer.j2
    dest: /etc/systemd/system/jumphost-backup.timer
    owner: root
    group: root
    mode: "0644"
  notify: reload systemd

- name: Backup-Timer aktivieren
  ansible.builtin.systemd:
    name: jumphost-backup.timer
    daemon_reload: true
    enabled: true
    state: started