Ansible Rescript

This role deploys rescript, a bash shell wrapper for Restic.

Dependencies

• Restic

Example Playbook

---

- name: Restic
  hosts: restic_servers
  become: true

  roles:
    - sebastian13.restic
    - sebsatian13.rescript

  vars:
    restic_repos:
      - name: example-blocklevel-repo
        restic_repo: 's3:https://...'
        restic_password: !vault |
              $ANSIBLE_VAULT;1.1;AES256
              65616131343239383...36333833432393830
        restic_aws_id: !vault |
              $ANSIBLE_VAULT;1.1;AES256
              33326165343464663...64306164643562363
        restic_aws_key: !vault |
              $ANSIBLE_VAULT;1.1;AES256
              32356139333035363...33665666403232353
        rescript_email: "[email protected]"

    rescript_cronjobs:
      - name: example-blocklevel-backup
        repo_name: 'example-blocklevel-repo'
        cron_hour: '03'
        cron_weekday: 'MON-FRI'

Passwords and secret keys should be encrypted using ansible-vault

ansible-vault encrypt_string --stdin-name 'RESTIC_PASSWORD'

The playbook must then be run as follows:

ansible-playbook rescript.yml --ask-vault-pass

Ressources

• sulfuror/rescript.sh
• restic/restic
• restic.net
• ansible-restic