Add backupclient

roles/backup/tasks/borg.yml

@@ -1,3 +1,21 @@
 ---
 - name: install borg
-  apt: name="borgbackup" state=present
+  apt: name="borgbackup" state=present
+
+- name: create repositories
+  file:
+    path: "{{item.path}}"
+    state: directory
+  with_items: "{{backup.repositories}}"
+
+- name: init borg repositories
+  command: "borg init {{item.path}} --encryption=none"
+  args:
+    creates: "{{item.path}}/README"
+  with_items: "{{backup.repositories}}"
+
+- name: create READMES
+  template:
+    src=borg_README.j2
+    dest="{{item.path}}/README"
+  with_items: "{{backup.repositories}}"

roles/backup/templates/borg_README.j2

@@ -0,0 +1,2 @@
+This is a generate FET borg repository.
+Name: {{item.name}}

roles/backupclient/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+backup_borg: True

roles/backupclient/tasks/borg.yml

@@ -0,0 +1,26 @@
+---
+- name: install borg
+  apt: name="borgbackup" state=present
+
+- name: create backup user
+  user:
+    name: borg_backup
+    comment: "BackupUser für BORG Backup"
+    group: root
+    generate_ssh_key: yes
+    ssh_key_bits: 4096
+    ssh_key_file: .ssh/id_rsa
+
+- name: fetch pubickey
+  shell: "cat /home/borg_backup/.ssh/id_rsa.pub"
+  register: id_rsa_pub
+
+- name: Add authorized key to borg backup servers
+  authorized_key:
+    user: "root"
+    key: "{{id_rsa_pub.stdout}}"
+    key_options: 'command="borg serve --restrict-to-path /srv/rep1"'
+  delegate_to: "{{item}}"
+  with_items: "{{groups['backup']}}"
+  when: id_rsa_pub.stdout is defined
+

roles/backupclient/tasks/main.yml

@@ -0,0 +1,4 @@
+---
+- include: borg.yml
+  when: backup_borg
+  tags: ['backup', 'borg']