- name: Create

  hosts: localhost

  connection: local

  no_log: "{{ not lookup('env', 'MOLECULE_DEBUG') | bool }}"

  vars:

    molecule_file: "{{ lookup('env', 'MOLECULE_FILE') }}"

- name: Destroy

  hosts: localhost

  connection: local

  no_log: "{{ not lookup('env', 'MOLECULE_DEBUG') | bool }}"

  vars:

    molecule_file: "{{ lookup('env', 'MOLECULE_FILE') }}"

lint:

  name: yamllint

# NOTE: Hostnames are shortened because default values for backup

# usernames are calculated by appending hostname to the "bak-" string,

---

- hosts: parameters-mandatory

  roles:

    - role: backup_client

      backup_encryption_key: "{{ lookup('file', 'tests/data/gnupg/parameters-mandatory.asc') }}"

      backup_ssh_key: "{{ lookup('file', 'tests/data/ssh/parameters-mandatory' ) }}"

- hosts: parameters-optional

  roles:

    - role: backup_client

# Deploy a dummy pre-backup script for testing purposes.

- hosts: parameters-mandatory,parameters-optional

  tasks:

    - name: Deploy pre-backup script

- name: Prepare

  hosts: all

  tasks:

    - name: Install python for Ansible

      raw: test -e /usr/bin/python || (apt -y update && apt install -y python-minimal)

- hosts: all

  tasks:

    - name: Update all caches to avoid errors due to missing remote archives

      apt:

- hosts: backup-server

  tasks:

    - name: Deploy SSH server keys

    - name: Set-up port forwarding

      command: "iptables -t nat -A PREROUTING -p tcp -m tcp --dport '{{ item }}' -j REDIRECT --to-ports 22"

      with_items:

        - 2222

        - 3333