975 B
Install collection dependencies:
ansible-galaxy collection install -r requirements.yml
Run setup:
ansible-playbook -i inventories/prod/hosts.ini playbooks/setup.yml
Run backup:
ansible-playbook -i inventories/prod/hosts.ini playbooks/backup.yml
Run restore:
ansible-playbook -i inventories/prod/hosts.ini playbooks/restore.yml
Manual backup:
ansible-playbook -i inventories/prod/hosts.ini playbooks/backup.yml
Automated backups run via systemd timer (bi-weekly by default).
Vault variables (inventories/prod/group_vars/all/vault.yml):
vault_kellnr_admin_pwd: "..." vault_pg_password: "..." vault_secret_key: "random-long-django-secret" vault_restic_password: "..." vault_accounts_ssh_pubkey: "ssh-ed25519 ..." vault_accounts_ssh_private_key: | -----BEGIN OPENSSH PRIVATE KEY----- ... vault_rclone_proton_username: "user@proton.me" vault_rclone_proton_password: "rclone-obscured-password" vault_rclone_proton_2fa: "TOTP-SECRET"