Clark Boylan 4d25261bb6 Force borg backups to run over ipv4
We've recently been unable to backup from gitea09 to the vexxhost backup
server. Testing indicates that ipv6 connectivity between the two servers
is the likely issue. Address this by forcing all backups to run over
ipv4 instead of ipv6. We could restrict this to only gitea09 if we
wanted to and/or only when the vexxhost server is the target, but this
is the simplest way to make the change in the existing configuration
management.

Change-Id: Ic868ded7d923b822d757a57416f879fd59c003e9
2023-12-11 08:32:14 -08:00
..
2022-05-05 08:36:20 -07:00
2023-12-11 08:32:14 -08:00

Configure a host to be backed up

This role setups a host to use borgp for backup to any hosts in the borg-backup-server group.

A separate ssh key will be generated for root to connect to the backup server(s) and the host key for the backup servers will be accepted to the host.

The borg tool is installed and a cron job is setup to run the backup periodically.

Note the borg-backup-server role must run after this to create the user correctly on the backup server. This role sets a tuple borg_user with the username and public key; the borg-backup-server role uses this variable for each host in the borg-backup group to initalise users.

Hosts can place into /etc/borg-streams which should be a script that outputs to stdout data to be fed into a backup archive on each run. This will be saved to an archive with the name of the file. This is useful for raw database dumps which allow borg to deduplicate as much as possible.

Role Variables

The username to connect to the backup server. If this is left undefined, it will be automatically set to borg-$(hostname)