alex/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

aaawq

Browse Source 
Merge branch 'main' of github.com:alexpolo1/ansible
This commit is contained in:
alex
2024-10-04 08:56:48 +02:00
parent 9b100a90c2 1f4815ce65
commit 5511e1acbc
104 changed files with 3415 additions and 3557 deletions
Download Patch File Download Diff File Expand all files Collapse all files

105
backupubu.yml
View File

@@ -6,129 +6,156 @@
- vault.yml
vars:
backup_dir: "/home"
nas_target_base: "/volume1/Backup"
cron_time: "0 17 * * 0" # This represents every Sunday at 17:00
backup_dir: /home
nas_target_base: /volume1/Backup
cron_time: "0 17 * * 0" # This represents every Sunday at 17:00
hostname: "{{ ansible_hostname }}"
cron_name: "Wake NAS and Backup to Synology NAS"
cron_name: Wake NAS and Backup to Synology NAS
ssh_key_paths:
- "/home/alex/.ssh/id_ed25519.pub"
- "/home/alex/.ssh/id_rsa.pub"
- "/home/alex/.ssh/id_ecdsa.pub"
- "/home/alex/.ssh/id_dsa.pub"
- /home/alex/.ssh/id_ed25519.pub
- /home/alex/.ssh/id_rsa.pub
- /home/alex/.ssh/id_ecdsa.pub
- /home/alex/.ssh/id_dsa.pub
tasks:
- name: Update apt cache
apt:
update_cache: yes
become: yes
become: true
ansible.builtin.apt:
update_cache: true
- name: Ensure rsync is installed
apt:
become: true
ansible.builtin.apt:
name: rsync
state: present
become: yes
- name: Ensure etherwake is installed
apt:
become: true
ansible.builtin.apt:
name: etherwake
state: present
become: yes
- name: Find network interface with 192.168.1.x IP address
shell: ip -o -4 addr list | grep '192.168.1.' | awk '{print $2}'
register: network_interface
ansible.builtin.shell: ip -o -4 addr list | grep '192.168.1.' | awk '{print $2}'
- name: Set network_interface fact
set_fact:
ansible.builtin.set_fact:
network_interface: "{{ network_interface.stdout }}"
- name: Find existing SSH public key
stat:
path: "{{ item }}"
with_items: "{{ ssh_key_paths }}"
register: ssh_key_check
ansible.builtin.stat:
path: "{{ item }}"
- name: Set SSH key path
set_fact:
ssh_key_path: "{{ ssh_key_check.results | selectattr('stat.exists', 'equalto', true) | map(attribute='item') | first }}"
when: ssh_key_check.results | selectattr('stat.exists', 'equalto', true) | length > 0
ansible.builtin.set_fact:
ssh_key_path: "{{ ssh_key_check.results | selectattr('stat.exists', 'equalto', true) | map(attribute='item') | first }}"
- name: Debug SSH key path
debug:
ansible.builtin.debug:
msg: "SSH key path: {{ ssh_key_path }}"
- name: Read the SSH public key
slurp:
src: "{{ ssh_key_path }}"
register: ssh_pub_key
when: ssh_key_path is defined
ansible.builtin.slurp:
src: "{{ ssh_key_path }}"
- name: Ensure .ssh directory exists on the NAS
<<<<<<< HEAD
command: "ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null alex@alex-ds414.localdomain 'mkdir -p ~/.ssh && chmod 700 ~/.ssh'"
ignore_errors: yes
- name: Add the SSH public key to the NAS authorized_keys
command: "ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null alex@alex-ds414.localdomain 'echo {{ ssh_pub_key.content | b64decode }} >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys'"
=======
ignore_errors: true
ansible.builtin.command: ssh alex@alex-ds414.localdomain 'mkdir -p ~/.ssh && chmod 700 ~/.ssh'
- name: Add the SSH public key to the NAS authorized_keys
>>>>>>> 1f4815ce65e05dc5fd5cb1a0b2d50a999060d539
when: ssh_key_path is defined
ansible.builtin.command: ssh alex@alex-ds414.localdomain 'echo {{ ssh_pub_key.content | b64decode }} >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys'
- name: Show debug info for rsync_user and rsync_password
debug:
ansible.builtin.debug:
msg: "rsync_user: {{ rsync_user }}, rsync_password: {{ rsync_password }}"
- name: Wake up the NAS
command: sudo etherwake -i {{ network_interface }} 00:11:32:43:FA:11
async: 0
poll: 0
become: yes
become: true
ansible.builtin.command: sudo etherwake -i {{ network_interface }} 00:11:32:43:FA:11
- name: Wait for 1 minute to allow NAS to start up initially
wait_for:
ansible.builtin.wait_for:
timeout: 60
- name: Check if NAS is reachable via SSH
<<<<<<< HEAD
command: "ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o BatchMode=yes -o ConnectTimeout=5 alex@alex-ds414.localdomain echo 'SSH connection successful'"
=======
>>>>>>> 1f4815ce65e05dc5fd5cb1a0b2d50a999060d539
register: nas_ping_result
ignore_errors: yes
ignore_errors: true
ansible.builtin.command: ssh -o BatchMode=yes -o ConnectTimeout=5 alex@alex-ds414.localdomain echo 'SSH connection successful'
- name: Fail if the NAS is not reachable via SSH
fail:
msg: "NAS is not reachable via SSH. Exiting."
when: nas_ping_result.rc != 0
ansible.builtin.fail:
msg: NAS is not reachable via SSH. Exiting.
- name: Perform the test rsync
<<<<<<< HEAD
command: rsync -av --dry-run --delete --info=progress2 {{ backup_dir }}/ alex@alex-ds414.localdomain:{{ nas_target_base }}/{{ hostname }}/
=======
>>>>>>> 1f4815ce65e05dc5fd5cb1a0b2d50a999060d539
register: rsync_test
ignore_errors: yes
ignore_errors: true
failed_when: rsync_test.rc not in [0, 23]
ansible.builtin.command: rsync -av --dry-run --delete {{ backup_dir }}/ alex@alex-ds414.localdomain:{{ nas_target_base }}/{{ hostname }}/
- name: Fail if the rsync test fails for reasons other than permission issues
fail:
msg: "rsync test failed for reasons other than permission issues. Exiting."
when: rsync_test.rc not in [0, 23]
ansible.builtin.fail:
msg: rsync test failed for reasons other than permission issues. Exiting.
- name: Perform the backup using rsync
<<<<<<< HEAD
command: rsync -av --delete --info=progress2 {{ backup_dir }}/ alex@alex-ds414.localdomain:{{ nas_target_base }}/{{ hostname }}/
=======
>>>>>>> 1f4815ce65e05dc5fd5cb1a0b2d50a999060d539
when: rsync_test.rc in [0, 23]
ignore_errors: yes
ignore_errors: true
failed_when: rsync_test.rc not in [0, 23]
ansible.builtin.command: rsync -av --delete {{ backup_dir }}/ alex@alex-ds414.localdomain:{{ nas_target_base }}/{{ hostname }}/
- name: Check if cron job exists
cron:
register: cron_present
ignore_errors: true
ansible.builtin.cron:
name: "{{ cron_name }}"
state: present
register: cron_present
ignore_errors: yes
- name: Add cron job for backup if not present
cron:
when: rsync_test.rc in [0, 23] and (cron_present is not defined or cron_present is failed)
become: true
ansible.builtin.cron:
name: "{{ cron_name }}"
minute: "{{ cron_time.split()[0] }}"
hour: "{{ cron_time.split()[1] }}"
day: "{{ cron_time.split()[2] }}"
month: "{{ cron_time.split()[3] }}"
weekday: "{{ cron_time.split()[4] }}"
<<<<<<< HEAD
job: "sudo etherwake -i {{ network_interface }} 00:11:32:43:FA:11 && sleep 300 && rsync -av --info=progress2 --delete /home/ alex@alex-ds414.localdomain:{{ nas_target_base }}/{{ hostname }}/"
when: rsync_test.rc == 0 and (cron_present is not defined or cron_present is failed)
become: yes
=======
job: sudo etherwake -i {{ network_interface }} 00:11:32:43:FA:11 && sleep 300 && rsync -av --delete /home/ alex@alex-ds414.localdomain:{{ nas_target_base
}}/{{ hostname }}/
>>>>>>> 1f4815ce65e05dc5fd5cb1a0b2d50a999060d539