from os.path import join if node.metadata['backups'].get('exclude_from_backups', False): files = { '/etc/backup.priv': { 'delete': True, }, } else: files = { '/usr/local/bin/generate-backup': { 'content_type': 'mako', 'context': { 'username': node.metadata['backup-client']['user-name'], 'server': node.metadata['backup-client']['server'], 'paths': node.metadata.get('backups', {}).get('paths', {}), }, 'mode': '0700', }, '/etc/backup.priv': { 'content': repo.vault.decrypt_file(join('backup', 'keys', f'{node.name}.key.vault')), 'mode': '0400', }, }