4 files changed, 114 insertions, 8 deletions
diff --git a/ansible/roles/borg-client/defaults/main.yml b/ansible/roles/borg-client/defaults/main.yml
new file mode 100644
index 0000000..b450b4d
--- /dev/null
+++ b/ansible/roles/borg-client/defaults/main.yml
@@ -0,0 +1 @@
+ssh_key: /etc/borg/id_ed25519
diff --git a/ansible/roles/borg-client/tasks/main.yml b/ansible/roles/borg-client/tasks/main.yml
index 79a9406..a65ae3e 100644
--- a/ansible/roles/borg-client/tasks/main.yml
+++ b/ansible/roles/borg-client/tasks/main.yml
@@ -1,8 +1,95 @@
 ---
 - name: packages
+  become: yes
   tags: packages
   apt:
-    name: "{{ item }}"
+    name: "{{ items }}"
     install_recommends: no
-  with_items:
-    - borgbackup
+  vars:
+    items:
+      - borgbackup
+
+- name: mkdir /etc/borg
+  become: yes
+  file:
+    path: /etc/borg
+    state: directory
+    mode: u=rwx,go=
+
+- name: Generate SSH keys
+  become: yes
+  command: ssh-keygen -t ed25519 -N "" -f "{{ ssh_key }}" -C "for borg @ {{ ansible_hostname }}"
+  args:
+    creates: "{{ ssh_key }}"
+  register: ssh_key_generated
+
+- when: ssh_key_generated.changed
+  become: yes
+  fetch:
+    src: "{{ ssh_key }}.pub"
+    dest: "files"
+
+- name: /etc/borg/env
+  become: yes
+  copy:
+    dest: /etc/borg/env
+    content: |
+      BORG_REPO="borg@{{ borg_client__server }}:{{ ansible_hostname }}"
+      BORG_RSH="ssh -i {{ ssh_key}}"
+
+# "
+
+- name: /etc/borg/excludes
+  become: yes
+  when: borg_client__state == "absent"
+  file:
+    path: /etc/borg/excludes
+    state: absent
+
+- name: /etc/borg/excludes
+  when: borg_client__state == "present"
+  become: yes
+  copy:
+    dest: /etc/borg/excludes
+    content: |
+      /proc
+      /dev
+      /sys
+
+- name: /etc/borg/patterns
+  become: yes
+  copy:
+    dest: /etc/borg/patterns
+    content: |
+      P sh
+      R /
+      {% for item in borg_client__patterns %}
+      {{ item }}
+      {% endfor %}
+
+- name: /usr/local/bin/create-backup
+  become: yes
+  template:
+    dest: /usr/local/bin/create-backup
+    src: bin/create-backup
+    mode: u=rx,go=
+    owner: root
+    group: root
+
+- become: yes
+  copy:
+    dest: /etc/systemd/system/create-backup.service
+    content: |
+      [Unit]
+      Description=Create backup
+
+      [Service]
+      Type=oneshot
+      WorkingDirectory=/
+      ExecStart=/usr/local/bin/create-backup
+  register: create_backup_service
+
+- when: create_backup_service.changed
+  become: yes
+  systemd:
+    daemon_reload: yes
diff --git a/ansible/roles/borg-client/templates/bin/create-backup b/ansible/roles/borg-client/templates/bin/create-backup
new file mode 100644
index 0000000..dfbe72d
--- /dev/null
+++ b/ansible/roles/borg-client/templates/bin/create-backup
@@ -0,0 +1,23 @@
+#!/bin/bash
+
+set -euo pipefail
+
+cd /
+
+. /etc/borg/env
+export BORG_REPO
+export BORG_RSH
+
+cmd=()
+cmd+=(borg create)
+cmd+=(--stats)
+cmd+=(--progress)
+cmd+=(--json)
+cmd+=(--exclude-from=/etc/borg/excludes)
+cmd+=(--patterns-from=/etc/borg/patterns)
+cmd+=(::'{hostname}-{now:%Y-%m-%dT%H:%M:%S}')
+
+echo BORG_REPO=$BORG_REPO
+
+set -x
+time "${cmd[@]}"
diff --git a/ansible/roles/borg-client/templates/bin/trygvis-borg-run-backup b/ansible/roles/borg-client/templates/bin/trygvis-borg-run-backup
deleted file mode 100644
index 7f3e218..0000000
--- a/ansible/roles/borg-client/templates/bin/trygvis-borg-run-backup
+++ /dev/null
@@ -1,5 +0,0 @@
-#!/bin/bash
-
-set -euo pipefail
-
-/usr/bin/borg