bundlewrap/nodes/htz-hel/backup-kunsi.py

54 lines
1.5 KiB
Python
Raw Permalink Normal View History

2022-01-04 14:18:41 +00:00
nodes['htz-hel.backup-kunsi'] = {
'hostname': '2a01:4f9:6b:2d99::1337',
'bundles': {
'backup-server',
'dm-crypt',
'zfs',
},
'groups': {
'debian-bullseye',
},
'metadata': {
'apt': {
'unattended-upgrades': {
# requires manual apply after reboot to unlock dm-crypt
# devices
'reboot_enabled': False,
2022-01-04 14:18:41 +00:00
},
},
'interfaces': {
'ens18': {
'ips': {
'2a01:4f9:6b:2d99::1337/64',
},
'gateway6': '2a01:4f9:6b:2d99::2',
},
},
'backups': {
# This is the backup target.
'exclude_from_backups': True,
},
'backup-server': {
'encrypted-devices': {
'/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi1-part1': bwpass.password('bw/backup-kunsi/encryption-passphrase'),
2022-01-04 14:18:41 +00:00
},
'clients': {
'kunsi-t470': {
'user': 'kunsi-t470',
'exclude_from_monitoring': True,
'retain': {
'daily': 30,
'weekly': 6,
'monthly': 12,
},
},
},
},
'openssh': {
'allowed_users': {
'kunsi-t470', # backup user
},
2022-01-04 14:18:41 +00:00
},
},
}