Skip to content
Snippets Groups Projects
Commit 6c0b9f0b authored by void's avatar void
Browse files

verteilte borgbackups eingerichtet

parent da60f611
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
host_vars/warpsrvext
+ 9
− 0
View file @ 6c0b9f0b
......@@ -8,6 +8,7 @@ motd_lines:
debian_sources:
- "deb http://repo.myloc.de/debian jessie main non-free contrib"
- "deb http://security.debian.org/ jessie/updates main contrib non-free"
- "deb http://ftp.debian.org/debian jessie-backports main"
debian_keys:
......@@ -18,3 +19,11 @@ administratorenteam:
- "commander1024"
borgbackup_user:
warpzone:
sshkeys:
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID2EdE/pfN3L91XytQ3+KXLTxAvAGSUE6TKpHTcOcJWw root@warpsrvint"
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIENYus4S4XOaGHVL4B6vbnIrovtqaCT1lbEF73StiTt+ root@webserver"
host_vars/warpsrvint
+ 65
− 0
View file @ 6c0b9f0b
......@@ -9,6 +9,7 @@ debian_sources:
- "deb http://debian.uni-duisburg-essen.de/debian/ jessie main non-free contrib"
- "deb http://security.debian.org/ jessie/updates main contrib non-free"
- "deb http://debian.uni-duisburg-essen.de/debian/ jessie-updates main contrib non-free"
- "deb http://ftp.debian.org/debian jessie-backports main"
- "deb https://apt.dockerproject.org/repo debian-jessie main"
- "deb [arch=amd64] https://download.docker.com/linux/debian jessie stable"
......@@ -25,3 +26,67 @@ administratorenteam:
- "sandhome"
- "sandmobil"
# - "ennox" (ssh key fehlt noch)
# Definition von Borgbackup Repositories
borgbackup_repos:
warpsrvext:
# URL des Repos
repo: "ssh://warpzone@217.79.181.126:/data/warpzone/warpsrvint"
# Repo-spezifische Optionen zum Aufruf von Borgbackup
# z.B. bei Sicherungen zu rsync.net ist --remote-path=borg1 erforderlich
options: ""
# Compression Options, z,b. "zlib,5, "zstd,5"
compression: "zlib,5"
# Prune Optionen
prune: "--keep-within=2d --keep-daily=7 --keep-weekly=4 --keep-monthly=6"
# Backup Schedule
weekday: "*"
hour: "6"
minute: "0"
# Zusätzliche Verzeichnisse, die nur in diesem Backup gesichtert werden sollen
# directories:
voidhome:
# URL des Repos
repo: "ssh://warpzone@130.180.13.106:5201/data/warpzone/warpsrvint"
# Repo-spezifische Optionen zum Aufruf von Borgbackup
# z.B. bei Sicherungen zu rsync.net ist --remote-path=borg1 erforderlich
options: ""
# Compression Options, z,b. "zlib,5, "zstd,5"
compression: "zlib,5"
# Prune Optionen
prune: "--keep-within=2d --keep-daily=7 --keep-weekly=4 --keep-monthly=6"
# Backup Schedule
weekday: "*"
hour: "*/5"
minute: "0"
# Zusätzliche Verzeichnisse, die nur in diesem Backup gesichtert werden sollen
# directories:
# Definition der Verzeichnisse, die in allen Borgbackup Repos gesichert werden sollen
borgbackup_directories:
- "/etc/"
- "/srv/"
borgbackup_user:
warpzone:
sshkeys:
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIENYus4S4XOaGHVL4B6vbnIrovtqaCT1lbEF73StiTt+ root@webserver"
host_vars/webserver
+ 79
− 14
View file @ 6c0b9f0b
......@@ -15,19 +15,6 @@ debian_sources:
debian_keys:
- "https://download.docker.com/linux/debian/gpg"
borgbackup_weekday: "*"
borgbackup_hour: "4"
borgbackup_minute: "0"
borgbackup_directories:
- "/etc/"
- "/srv/"
borgbackup_prune:
- "--keep-within=2d"
- "--keep-daily=7"
- "--keep-weekly=4"
- "--keep-monthly=6"
letsencrypt_tos_sha256: 6373439b9f29d67a5cd4d18cbc7f264809342dbf21cb2ba2fc7588df987a6221
......@@ -50,4 +37,82 @@ administratorenteam:
- "sandhome"
- "sandmobil"
- "commander1024"
\ No newline at end of file
# Definition von Borgbackup Repositories
borgbackup_repos:
warpsrvext:
# URL des Repos
repo: "ssh://warpzone@217.79.181.126:/data/warpzone/webserver"
# Repo-spezifische Optionen zum Aufruf von Borgbackup
# z.B. bei Sicherungen zu rsync.net ist --remote-path=borg1 erforderlich
options: ""
# Compression Options, z,b. "zlib,5, "zstd,5"
compression: "zlib,5"
# Prune Optionen
prune: "--keep-within=2d --keep-daily=7 --keep-weekly=4 --keep-monthly=6"
# Backup Schedule
weekday: "*"
hour: "*/4"
minute: "0"
# Zusätzliche Verzeichnisse, die nur in diesem Backup gesichtert werden sollen
# directories:
warpsrvint:
# URL des Repos
repo: "ssh://warpzone@192.168.0.201:22/data/warpzone/webserver"
# Repo-spezifische Optionen zum Aufruf von Borgbackup
# z.B. bei Sicherungen zu rsync.net ist --remote-path=borg1 erforderlich
options: ""
# Compression Options, z,b. "zlib,5, "zstd,5"
compression: "zlib,5"
# Prune Optionen
prune: "--keep-within=2d --keep-daily=7 --keep-weekly=4 --keep-monthly=6"
# Backup Schedule
weekday: "*"
hour: "*/5"
minute: "0"
# Zusätzliche Verzeichnisse, die nur in diesem Backup gesichtert werden sollen
# directories:
voidhome:
# URL des Repos
repo: "ssh://warpzone@130.180.13.106:5201/data/warpzone/webserver"
# Repo-spezifische Optionen zum Aufruf von Borgbackup
# z.B. bei Sicherungen zu rsync.net ist --remote-path=borg1 erforderlich
options: ""
# Compression Options, z,b. "zlib,5, "zstd,5"
compression: "zlib,5"
# Prune Optionen
prune: "--keep-within=2d --keep-daily=7 --keep-weekly=4 --keep-monthly=6"
# Backup Schedule
weekday: "*"
hour: "*/4"
minute: "0"
# Zusätzliche Verzeichnisse, die nur in diesem Backup gesichtert werden sollen
# directories:
# Definition der Verzeichnisse, die in allen Borgbackup Repos gesichert werden sollen
borgbackup_directories:
- "/etc/"
- "/srv/"
site.yml
+ 1
− 0
View file @ 6c0b9f0b
......@@ -5,6 +5,7 @@
- include: vorstandspi/main.yml
- include: warphab/main.yml
- include: warpsrvint/main.yml
- include: warpsrvext/main.yml
- include: webserver/main.yml
......
warpsrvext/main.yml 0 → 100644
+ 7
− 0
View file @ 6c0b9f0b
---
- hosts: warpsrvext
remote_user: root
roles:
- { role: ../common/borgserver, tags: borgserver }
warpsrvint/main.yml
+ 2
− 0
View file @ 6c0b9f0b
......@@ -3,6 +3,8 @@
- hosts: warpsrvint
remote_user: root
roles:
- { role: ../common/borgbackup, tags: borgbackup }
- { role: ../common/borgserver, tags: borgserver }
- { role: ../common/prometheus-node, tags: prometheus-node }
- { role: ../common/docker, tags: docker }
- { role: nginx, tags: nginx }
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment