bundlewrap/nodes/htz-hel/backup-kunsi.py
Franziska Kunsmann 0ccb983b28
All checks were successful
kunsi/bundlewrap/pipeline/head This commit looks good
bundles/apt: fix metadata key mess (unattended-upgrades vs unattended_upgrades)
2022-01-23 05:47:42 +01:00

53 lines
1.4 KiB
Python

nodes['htz-hel.backup-kunsi'] = {
'hostname': '2a01:4f9:6b:2d99::1337',
'bundles': {
'backup-server',
'dm-crypt',
'zfs',
},
'groups': {
'debian-bullseye',
},
'metadata': {
'apt': {
'unattended-upgrades': {
# requires manual apply after reboot to unlock dm-crypt
# devices
'reboot_enabled': False,
},
},
'interfaces': {
'ens18': {
'ips': {
'2a01:4f9:6b:2d99::1337/64',
},
'gateway6': '2a01:4f9:6b:2d99::2',
},
},
'backups': {
# This is the backup target.
'exclude_from_backups': True,
},
'backup-server': {
'encrypted-devices': {
'/dev/sdb1': bwpass.password('bw/backup-kunsi/encryption-passphrase'),
},
'clients': {
'kunsi-t470': {
'user': 'kunsi-t470',
'exclude_from_monitoring': True,
'retain': {
'daily': 30,
'weekly': 6,
'monthly': 12,
},
},
},
},
'openssh': {
'allowed_users': {
'kunsi-t470', # backup user
},
},
},
}