Ansible_workstation/tasks/borg_server.yml

---
- name: Install borgbackup
  apt:
    name: borgbackup
    state: present

- name: Add borgbackup group
  group: 
    name: "{{ borg_group }}" 
    state: present

- name: Add borgbackup user 
  user: 
    name: "{{ borg_user }}" 
    shell: /bin/bash 
    home: "{{ borg_home }}" 
    createhome: yes 
    group: "{{ borg_group }}" 
    state: present

- name: Fix permission on borgbackup home
  file: 
    path: "{{ borg_home }}"
    owner: "{{ borg_user }}"
    group: "{{ borg_group }}"
    mode: 0700
    state: directory

- name: Fix .ssh permision
  file:
    path: "{{ borg_home }}/.ssh"
    owner: "{{ borg_user }}"
    group: "{{ borg_group }}"
    mode: 0700
    state: directory

- name: Fix pool permission
  file:
    path: "{{ borg_pool }}"
    owner: "{{ borg_user }}"
    group: "{{ borg_group }}"
    mode: 0700
    state: directory

- name: Add autorized backup user through $HOME/.ssh/authorized_keys 
  authorized_key: 
    user: "{{ borg_user }}"
    key: "{{ item.key }}"
    key_options: 'command="cd {{ borg_pool }}/{{ item.host }};borg serve --restrict-to-path {{ borg_pool }}/{{ item.host }}",restrict'
  with_items: "{{ borg_auth_users }}"

- name: Fix permission on authorized_keys
  file: 
    path: "{{ borg_home }}/.ssh/authorized_keys"
    owner: "{{ borg_user }}"
    group: "{{ borg_group }}"
    mode: 0600
    state: file

- name: Fix permission on each repo
  file:
    path: "{{ borg_pool }}/{{ item.host }}"
    owner: "{{ borg_user }}"
    group: "{{ borg_group }}"
    mode: 0700
    state: directory
  with_items: "{{ borg_auth_users }}"