mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Fable 5
598b7c3a9a
New svc-bkp-secrets-2-local role: a differential rsync --link-dest snapshot of the host-generated secret material that lives in no docker volume, NFS export or operator inventory - infinito secrets + tokens, the self-signed CA, the Let's Encrypt account/certs, the ACME DNS credentials - plus the node identity (ssh host keys + machine-id). files/recover.py restores each present subtree to its fixed system path and gates the node-identity restore behind --restore-node-identity. Wires the systemd unit + nightly schedule (06_daemons, 07_schedule). Unit tests cover the domain/target map and the main() subtree-selection + node-identity gating. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
52 lines
2.2 KiB
YAML
52 lines
2.2 KiB
YAML
---
|
|
# Services
|
|
|
|
# # Meta
|
|
SYS_SERVICE_SUFFIX: ".{{ SOFTWARE_DOMAIN }}.service"
|
|
|
|
SYS_SERVICE_CLEANUP_BACKUPS: "{{ lookup('unit_name', 'sys-ctl-cln-bkps' ) }}"
|
|
SYS_SERVICE_CLEANUP_BACKUPS_FAILED: "{{ lookup('unit_name', 'sys-ctl-cln-faild-bkps' ) }}"
|
|
SYS_SERVICE_CLEANUP_ANONYMOUS_VOLUMES: "{{ lookup('unit_name', 'sys-ctl-cln-anon-volumes' ) }}"
|
|
SYS_SERVICE_CLEANUP_DISC_SPACE: "{{ lookup('unit_name', 'sys-ctl-cln-disc-space' ) }}"
|
|
SYS_SERVICE_CLEANUP_DOCKER: "{{ lookup('unit_name', 'sys-ctl-cln-docker' ) }}"
|
|
SYS_SERVICE_OPTIMIZE_DRIVE: "{{ lookup('unit_name', 'svc-opt-ssd-hdd' ) }}"
|
|
SYS_SERVICE_BACKUP_REMOTE_2_LOCAL: "{{ lookup('unit_name', 'svc-bkp-remote-2-local' ) }}"
|
|
SYS_SERVICE_BACKUP_VOLUME_2_LOCAL: "{{ lookup('unit_name', 'svc-bkp-volume-2-local') }}"
|
|
SYS_SERVICE_BACKUP_NFS_2_LOCAL: "{{ lookup('unit_name', 'svc-bkp-nfs-2-local' ) }}"
|
|
SYS_SERVICE_BACKUP_SECRETS_2_LOCAL: "{{ lookup('unit_name', 'svc-bkp-secrets-2-local' ) }}"
|
|
SYS_SERVICE_REPAIR_CONTAINER_SOFT: "{{ lookup('unit_name', 'sys-ctl-rpr-container-soft' ) }}"
|
|
SYS_SERVICE_REPAIR_CONTAINER_HARD: "{{ lookup('unit_name', 'sys-ctl-rpr-container-hard' ) }}"
|
|
|
|
SYS_SERVICE_ON_FAILURE_COMPOSE: "{{ lookup('unit_name','sys-ctl-alm-compose@', suffix=False ) }}%n.service"
|
|
|
|
SYS_SERVICE_GROUP_BACKUPS: >
|
|
{{ (('sys-ctl-bkp-' | get_category_entries) + ('svc-bkp-' | get_category_entries))
|
|
| map('regex_replace', '$', SYS_SERVICE_SUFFIX) | list | sort }}
|
|
|
|
SYS_SERVICE_GROUP_CLEANUP: >
|
|
{{ ('sys-ctl-cln-' | get_category_entries)
|
|
| map('regex_replace', '$', SYS_SERVICE_SUFFIX) | list | sort }}
|
|
|
|
SYS_SERVICE_GROUP_REPAIR: >
|
|
{{ ('sys-ctl-rpr-' | get_category_entries)
|
|
| map('regex_replace', '$', SYS_SERVICE_SUFFIX) | list | sort }}
|
|
|
|
SYS_SERVICE_GROUP_OPTIMIZATION: >
|
|
{{ ('svc-opt-' | get_category_entries)
|
|
| map('regex_replace', '$', SYS_SERVICE_SUFFIX) | list | sort }}
|
|
|
|
SYS_SERVICE_GROUP_MAINTANANCE: >
|
|
{{ ('svc-mtn-' | get_category_entries)
|
|
| map('regex_replace', '$', SYS_SERVICE_SUFFIX) | list | sort }}
|
|
|
|
SYS_SERVICE_GROUP_MANIPULATION: >
|
|
{{
|
|
(
|
|
SYS_SERVICE_GROUP_BACKUPS +
|
|
SYS_SERVICE_GROUP_CLEANUP +
|
|
SYS_SERVICE_GROUP_REPAIR +
|
|
SYS_SERVICE_GROUP_OPTIMIZATION +
|
|
SYS_SERVICE_GROUP_MAINTANANCE
|
|
) | sort
|
|
}}
|