diff --git a/roles/backup_client/templates/duply_main_conf.j2 b/roles/backup_client/templates/duply_main_conf.j2 index e19ec72df902180e3db2f79d616b59797e51a83c..228aa079209c39ac11c951daa3c91e8714a573ab 100644 --- a/roles/backup_client/templates/duply_main_conf.j2 +++ b/roles/backup_client/templates/duply_main_conf.j2 @@ -9,15 +9,7 @@ GPG_KEY_SIGN='{{ backup_encryption_key_id.stdout }}' GPG_OPTS="--homedir /etc/duply/main/gnupg/ --trust-model always" # Destination where the backups are stored at. -# -# Use the pexpect+sftp backend for Duplicity so we can (see also -# DUPL_PARAMS and --ssh-options): -# -# - Pass in custom options for user/global known_hosts files (not -# possible with Duplicity shipping with Debian 11 Bullseye). -# - Reduce logging verbosity (avoiding output from sftp that mentions -# updates of user's known_hosts file with IP addresses). -TARGET='pexpect+sftp://{{ backup_client_username }}@{{ backup_server }}:{{ backup_server_port }}/{{ backup_server_destination }}' +TARGET='paramiko+sftp://{{ backup_client_username }}@{{ backup_server }}:{{ backup_server_port }}/{{ backup_server_destination }}' # Base directory to backup (root). File selection is done via include/exclude # patterns. @@ -37,7 +29,7 @@ VOLSIZE=1024 DUPL_PARAMS="$DUPL_PARAMS --volsize $VOLSIZE " # Output verbosity (error 0, warning 1-2, notice 3-4, info 5-8, debug 9) -VERBOSITY=4 +VERBOSITY=notice # Path to a directory used for restoring files from backups. The file is stored # there temporarily. @@ -57,7 +49,7 @@ DUPL_PARAMS="$DUPL_PARAMS --use-agent" # (mentions of IP address additions to user's known_hosts file). Use # dedicated private key for performing logins towards the backup # server. -DUPL_PARAMS="$DUPL_PARAMS --ssh-options='-oLogLevel=ERROR -oUserKnownHostsFile=/dev/null -oGlobalKnownHostsFile=/etc/duply/main/ssh/known_hosts -oIdentityFile=/etc/duply/main/ssh/identity'" +DUPL_PARAMS="$DUPL_PARAMS --ssh-options='-oUserKnownHostsFile=/dev/null -oGlobalKnownHostsFile=/etc/duply/main/ssh/known_hosts -oIdentityFile=/etc/duply/main/ssh/identity'" # By default we exclude everything, and then include only specific patterns. DUPL_PARAMS="$DUPL_PARAMS --include-filelist /etc/duply/main/include"