Implemented working secure backup

2025-08-29 15:06:26 +02:00 · 2021-01-11 14:14:36 +01:00
parent dc0894f168
commit dc4ddb6b27
7 changed files with 66 additions and 11 deletions
--- a/roles/native-user-backup/tasks/main.yml
+++ b/roles/native-user-backup/tasks/main.yml
@@ -23,7 +23,15 @@
    group: backup
    mode: '0644'

- name: grant backup sudo rights with password
+- name: create /home/backup/ssh-wrapper.sh
+  template:
+    src: "ssh-wrapper.sh.j2"
+    dest: /home/backup/ssh-wrapper.sh
+    owner: backup
+    group: backup
+    mode: '0700'
+
+- name: grant backup sudo rights
  copy:
    src: "backup"
    dest: /etc/sudoers.d/backup