Ansible Role: restic

Description

Restic is a versatile Go based backup solution which supports multiple backends, deduplication and incremental backups.

This role installs restic on a client, configures the backup repositories and optionally sets up cronjobs to run said backups. Aditionally, it will setup executable scripts to run a Backup manually.

This Project borrows heavily from the donat-b/ansible-restic ansible role. We try to make this role more semver deployment friendly by allowing to use version tags and keep these snapshots and adapting the automated backup definition for use with windows systems.

Requirements

bzip2

Role Variables

Name	Default	Description
`restic_url`	`''`	The URL to download restic from. Use this variable to overwrite the default
`restic_version`	`'0.9.5'`	The version of Restic to install
`restic_download_path`	`'/opt/restic'`	Download location for the restic binary
`restic_install_path`	`'/usr/local/bin'`	Install location for the restic binary
`restic_script_dir`	`'~/restic'`	Location of the generated backup scripts
`restic_repos`	`{}`	A dictionary of repositories where snapshots are stored
`restic_backups`	`[]`	A list of dictionaries specifying the files and directories to be backed up
`restic_create_cron`	`false`	Should a cronjob be created for each backup
`restic_dir_owner`	`'{{ansible_user}}'`	The owner of all created dirs
`restic_dir_group`	`'{{ansible_user}}'`	The group of all created dirs

Repos

Restic stores data in repositories. You have to specify at least one repository to be able to use this role. A repository can be local or remote (see the official documentation).

Using an SFTP repository

For using an SFTP backend, the user needs passwordless access to the host. Please make sure to distribute ssh keys accordingly, as this is outside of the scope of this role.

Available variables:

Name	Required	Description
`location`	yes	The location of the Backend. Currently, Local and SFTP are supported
`password`	yes	The password used to secure this repository
`init`	no	Describes if the repository should be initialized or not. Use `false` if you are backuping to an already existing repo.

Example:

restic_repos:
  local:
    location: /srv/restic-repo
    password: securepassword1
    init: true
  remote:
    location: sftp:user@host:/srv/restic-repo
    password: securepassword2
    init: true

Backups

A backup specifies a directory or file to be backuped. A backup is written to a Repository defined in restic_repos.

Available variables:

Name	Required	Description
`name`	yes	The name of this backup. Used together with pruning and needs to be unique.
`repo`	yes	The name of the repository to backup to.
`src`	yes	The source directory or file
`stdin`	no	Is this backup created from a stdin?
`stdin_cmd`	no (yes if `stdin` == `true`)	The command to produce the stdin.
`stdin_filename`	no	The filename used in the repository.
`tags`	no	Array of default tags
`keep_last`	no	If set, only keeps the last n snapshots.
`keep_hourly`	no	If set, only keeps the last n hourly snapshots.
`keep_daily`	no	If set, only keeps the last n daily snapshots.
`keep_weekly`	no	If set, only keeps the last n weekly snapshots.
`keep_monthly`	no	If set, only keeps the last n monthly snapshots.
`keep_yearly`	no	If set, only keeps the last n yearly snapshots.
`keep_within`	no	If set, only keeps snapshots in this time period.
`keep_tag`	no	If set, keep snapshots with this tags.

Dependencies

none

Example Playbook

- hosts: all
  roles:
    - restic

Author

Matthias Leutenegger

License

This project is under the MIT License. See the LICENSE file for the full license text.

8.2 KiB Raw Blame History