- name: Create

  hosts: localhost

  connection: local

  no_log: "{{ not lookup('env', 'MOLECULE_DEBUG') | bool }}"

  vars:

    molecule_file: "{{ lookup('env', 'MOLECULE_FILE') }}"

- name: Destroy

  hosts: localhost

  connection: local

  no_log: "{{ not lookup('env', 'MOLECULE_DEBUG') | bool }}"

  vars:

    molecule_file: "{{ lookup('env', 'MOLECULE_FILE') }}"

lint:

  name: yamllint

platforms:

---

- hosts: parameters-mandatory

  roles:

    - role: backup_server

      backup_host_ssh_private_keys:

        ecdsa: "{{ lookup('file', 'tests/data/ssh/server_ecdsa') }}"

- hosts: parameters-optional

  roles:

    - role: backup_server

      backup_host_ssh_private_keys:

- name: Prepare

  hosts: all

  tasks:

- hosts: localhost

        - tests/data/ssh/client2

- hosts: all

  tasks:

    - name: Install python for Ansible

      raw: test -e /usr/bin/python || (apt -y update && apt install -y python-minimal)

    - name: Update all caches to avoid errors due to missing remote archives

      apt:

  group:

    name: "{{ item.server | replace('.', '_') | regex_replace('^', 'bak-') }}"

    gid: "{{ item.uid | default(omit) }}"

  with_items: "{{ backup_clients }}"

- name: Create backup client users

    group: "{{ item.server | replace('.', '_') | regex_replace('^', 'bak-') }}"

    groups: "backup"

    uid: "{{ item.uid | default(omit) }}"

    state: present

    home: "/srv/backups/{{ item.server }}"

  with_items: "{{ backup_clients }}"

  authorized_key:

    user: "{{ item.server | replace('.', '_') | regex_replace('^', 'bak-') }}"

    key: "{{ item.public_key }}"

    state: present

  with_items: "{{ backup_clients }}"

  with_dict: "{{ backup_host_ssh_private_keys }}"

  notify:

    - Restart backup SSH server

- name: Deploy backup OpenSSH server systemd service file

  copy:

  service:

    name: "ssh-backup"

    state: started

- name: Deploy firewall configuration for backup server

  template: