from os.path import join if node.metadata['backups'].get('exclude_from_backups', False): files = { '/etc/backup.priv': { 'delete': True, }, } else: if ':' in node.metadata['backup-client']['server']: server, port = node.metadata['backup-client']['server'].split(':') else: server = node.metadata['backup-client']['server'] port = 22 files = { '/usr/local/bin/generate-backup': { 'content_type': 'mako', 'context': { 'username': node.metadata['backup-client']['user-name'], 'server': server, 'port': port, 'paths': node.metadata.get('backups', {}).get('paths', {}), }, 'mode': '0700', }, '/usr/local/share/icinga/plugins/check_backup_last_run': { 'mode': '0755', }, '/etc/backup.priv': { 'content': repo.vault.decrypt_file(join('backup', 'keys', f'{node.name}.key.vault')), 'mode': '0400', }, }