Initial commit

tasks/backup.yaml

@@ -0,0 +1,97 @@
+---
+- name: "{{ app_name }} - Backup application data"
+  block:
+    - name: Starting backup
+      debug:
+        msg: |
+          Starting backup of {{ app_name }}
+          Backing up dirs: {{ app_backup_subdirectories }}
+
+    - name: Validate required backup variables
+      ansible.builtin.fail:
+        msg: "Required variable {{ item }} is not defined"
+      when: vars[item] is not defined
+      loop:
+        - app_name
+        - app_dir
+        - backup_path
+
+    - name: Set backup source paths
+      ansible.builtin.set_fact:
+        _backup_sources: "{{ app_backup_subdirectories | default([app_dir + '/*']) }}"
+
+    - name: Create local backup directory on controller
+      ansible.builtin.file:
+        path: "{{ app_backup_path }}"
+        state: directory
+        mode: "0750"
+      delegate_to: localhost
+
+    - name: Create remote backup directory on host
+      ansible.builtin.file:
+        path: "{{ app_backup_path_remote | default(app_dir + '/backups') }}"
+        state: directory
+        owner: "{{ app_uid | default(omit) }}"
+        group: "{{ app_gid | default(omit) }}"
+        mode: "{{ app_permission_mode | default('0755') }}"
+
+    - name: Stop application for backup
+      community.docker.docker_compose_v2:
+        project_src: "{{ app_dir }}"
+        state: stopped
+      when: app_backup_stop_services | default(true)
+
+    - name: Create timestamped backup
+      ansible.builtin.archive:
+        path: "{{ _backup_sources }}"
+        dest: "{{ app_backup_path_remote | default(app_dir + '/backups') }}/{{ app_name }}-{{ ansible_date_time.iso8601_basic_short }}.tar.gz"
+        format: gz
+        owner: "{{ app_uid | default(omit) }}"
+        group: "{{ app_gid | default(omit) }}"
+        mode: "{{ app_permission_mode | default('0644') }}"
+      register: remote_backup
+
+    - name: Copy backup to controller
+      ansible.builtin.fetch:
+        src: "{{ remote_backup.dest }}"
+        dest: "{{ app_backup_path }}/{{ app_name }}-{{ ansible_date_time.iso8601_basic_short }}.tar.gz"
+        flat: true
+      when: remote_backup is succeeded
+
+    - name: Clean old backups on controller
+      ansible.builtin.find:
+        paths: "{{ app_backup_path }}"
+        patterns: "{{ app_name }}-*.tar.gz"
+        age: "{{ app_backup_retention_days_controller | default(90) }}d"
+      register: old_backups_controller
+      delegate_to: localhost
+
+    - name: Remove old backups from controller
+      ansible.builtin.file:
+        path: "{{ item.path }}"
+        state: absent
+      loop: "{{ old_backups_controller.files | default([]) }}"
+      delegate_to: localhost
+
+    - name: Clean old backups on remote host
+      ansible.builtin.find:
+        paths: "{{ app_backup_path_remote | default(app_dir + '/backups') }}"
+        patterns: "{{ app_name }}-*.tar.gz"
+        age: "{{ app_backup_retention_days_remote | default(7) }}d"
+      register: old_backups_remote
+
+    - name: Remove old backups from remote host
+      ansible.builtin.file:
+        path: "{{ item.path }}"
+        state: absent
+      loop: "{{ old_backups_remote.files | default([]) }}"
+
+  always:
+    - name: Restart application after backup
+      community.docker.docker_compose_v2:
+        project_src: "{{ app_dir }}"
+        state: present
+      when: app_backup_stop_services | default(true)
+
+  tags: [backup]
+  when: app_backup | bool