diff options
| author | Colin Wilk <colin@wilk.cx> | 2026-06-27 23:01:10 +0200 |
|---|---|---|
| committer | Colin Wilk <colin@wilk.cx> | 2026-06-27 23:05:21 +0200 |
| commit | 8d872069976c5445c4396804ef3a0196f10eb14b (patch) | |
| tree | 53ba2a34baf356fa9711e9be472d2d5322f1010e /molecule/default/converge.yml | |
| parent | cce7d2d258292c283d64ce8da14a6d1e366b564d (diff) | |
| download | ansible-role-borgbackup-8d872069976c5445c4396804ef3a0196f10eb14b.tar.gz ansible-role-borgbackup-8d872069976c5445c4396804ef3a0196f10eb14b.zip | |
feat: add per-repo SSH key support
Add borg_ssh_key_per_repo option to generate unique SSH keypairs per
(server, repo) combination. When enabled, each repository gets its own
authorized_keys entry, enabling:
- Independent --append-only settings per repository
- Per-repo storage quotas
Diffstat (limited to 'molecule/default/converge.yml')
| -rw-r--r-- | molecule/default/converge.yml | 38 |
1 files changed, 38 insertions, 0 deletions
diff --git a/molecule/default/converge.yml b/molecule/default/converge.yml index d90f33a..fec5f95 100644 --- a/molecule/default/converge.yml +++ b/molecule/default/converge.yml @@ -5,6 +5,7 @@ - borg-client-2 - borg-client-multi - borg-client-nonroot + - borg-client-multi-keys vars: borg_server_host: borg-server @@ -127,3 +128,40 @@ borg_included_dirs: - /etc borg_excluded_dirs: [] + +- name: Converge - Per-repo SSH keys with different append-only settings + hosts: borg-client-multi-keys + serial: 1 + + vars: + borg_server_host: borg-server + borg_server_user_home: /opt/borg + borg_decryption_keys_yaml_path: "{{ playbook_dir }}/decryption_keys.yml" + + roles: + - role: kliwniloc.borgbackup + vars: + borg_repo_name: configs-keys + borg_backup_argument: configs-keys + borg_ssh_key_per_repo: true + borg_ssh_key_type: ed25519 + borg_mode_append_only: true + borg_compression: zstd + borg_included_dirs: + - /etc + borg_excluded_dirs: [] + borg_systemd_oncalendar: "*-*-* 02:00:00" + + - role: kliwniloc.borgbackup + vars: + borg_repo_name: home-data-keys + borg_backup_argument: home-data-keys + borg_ssh_key_per_repo: true + borg_ssh_key_type: ed25519 + borg_mode_append_only: false + borg_compression: lz4 + borg_included_dirs: + - /home + borg_excluded_dirs: + - /home/*/.cache + borg_systemd_oncalendar: "*-*-* 04:00:00" |