Ergänzungen

2 years ago · bd726f9bc0
3 changed files with 85 additions and 0 deletions
--- a/ansible-create_backup_script.yml
+++ b/ansible-create_backup_script.yml
@ -0,0 +1,74 @@
 ---
 - name: Setup Backup Script
  hosts: all
  become: yes
  vars_files:
    - vault.yml
  tasks:
    - name: Erstelle Backup-Verzeichnis
      file:
        path: /mnt/docker/backup
        state: directory
        mode: '0755'
    - name: Erstelle Backup-Skript
      copy:
        dest: /usr/local/src/backup-to-s3.sh
        mode: '0750'
        owner: root
        group: root
        content: |
          #!/bin/bash
          EMAIL_FROM="mail@notifications.asmodee.de"
          EMAIL_TO="it-admin@asmodee.de"
          ARCHIV_NAME="docker05"
          ARCHIV_PASS="{{ backup_archive_password }}"
          ARCHIV_PATH="/mnt/docker/backup"
          ARCHIV_TIME="$(date +%Y-%m-%d_%H-%M-%S)"
          AWS_BUCKET="de.asmodee.docker05.backup"
          AWS_SETUP_CP="--storage-class GLACIER"
          AWS_EXEC="docker run --rm -v /root/.aws:/root/.aws -v ${ARCHIV_PATH}:/aws amazon/aws-cli"
          BACKUP_DATAS[0]="unifi-backups|/mnt/docker/unifi-controller/data/data/backup/"
          # Testings
          test -f /root/.aws/config || exit 1
          test -f /root/.aws/credentials || exit 1
          test -d "${ARCHIV_PATH}" || exit 1
          test -x "$(which 7z)" || exit 1
          test -x "$(which docker)" || exit 1
          # CleanUp previews Backups
          find "${ARCHIV_PATH}" -maxdepth 1 -type f -name "*.7z" -delete
          # Backup Attachements (only on Sunday!)
          if [[ $(date +%u) -eq 7 ]]; then
          for BACKUP_DATA in "${BACKUP_DATAS[@]}"; do
          mapfile -td \| ENV_MAPFILE <<<"$BACKUP_DATA"
          DATA_NAME=$(echo ${ENV_MAPFILE[0]})
          DATA_PATH=$(echo ${ENV_MAPFILE[1]})
          7z a -p"${ARCHIV_PASS}" -mhe=on "${ARCHIV_PATH}/${ARCHIV_NAME}_${ARCHIV_TIME}_${DATA_NAME}-data.7z" "${DATA_PATH}"
          if [ $? -eq 0 ]; then
           $AWS_EXEC s3 cp "${ARCHIV_NAME}_${ARCHIV_TIME}_${DATA_NAME}-data.7z" s3://${AWS_BUCKET}/ ${AWS_SETUP_CP}
          else
           rm "${ARCHIV_PATH}/${ARCHIV_NAME}_${ARCHIV_TIME}_${DATA_NAME}-data.7z"
           echo "ERROR: ${DATA_NAME} Backup failed!"; exit 1; fi
          done
          fi
          # Email Notification
          echo "Subject:[$ARCHIV_NAME] Cloud Backup
          From:$ARCHIV_NAME <$EMAIL_FROM>
          To: $EMAIL_TO
          Mime-Version: 1.0
          Content-Type: text/html
          Charset: UTF-8
          <html><body>
          Backup Files:<br>
          $(ls -lh "${ARCHIV_PATH}" | sed "s/$/<br>/")
          <br>
          Service Log:<br>
          $(journalctl -u backup-to-s3.service --since today --output short | sed "s/$/<br>/")
          </body></html>" | docker exec -i mail-relay sendmail -f $EMAIL_FROM $EMAIL_TO
          # Clean Exit
          exit 0
--- a/setups/docker-compose.yml
+++ b/setups/docker-compose.yml
@ -42,6 +42,7 @@ services:
      - ./inventory/:/inventory:ro
      - ./authorized-keys/:/authorized-keys:ro
      - ./config/:/etc/semaphore:rw
    #  - ./ansible.cfg:/etc/ansible/ansible.cfg
    restart: unless-stopped
    depends_on:
      - mysql
--- a/setups/setup_vault.yml
+++ b/setups/setup_vault.yml
@ -0,0 +1,10 @@
 # Erzeugen der Vault:
 #   ansible-vault create vault.yml
 # hier muss dann das Passwort für den Zugriff auf die Vault eingegeben werden
 # Anschließend werden die benötigten Daten in der folgenden Form eingegeben:
 # backup_archive_password: IhrPasswortHier
 #
 # Erzeugen des Passwortfiles im Verzeichnis von root:
 # echo "IhrVaultPasswort" > /root/pw-file.txt
 # chown root:root /root/pw-file.txt
 # chmod 600 /root/pw-file.txt