restic

restic/client.sls

@@ -5,3 +5,14 @@
     - name: 'wget {{url}} -O - | bzip2 -cd > /bin/restic ; chmod +x /bin/restic'
     - unless: stat /bin/restic
 
+/opt/restic_backups.sh:
+  file.managed:
+    - source: 'salt://restic/files/restic_backup.sh.jinja'
+    - template: jinja
+    - user: root
+    - group: root
+    - mode: 0700
+  cron.present:
+    - minute: 20
+    - hour: 4
+    - dayweek: 0

restic/files/restic_backup.sh.jinja

@@ -0,0 +1,12 @@
+#!/bin/sh
+export HOME=/root
+export RESTIC_PASSWORD={{ salt.pillar.get('restic:pass') }}
+export RESTIC_REPOSITORY={{ salt.pillar.get('restic:repo') }}
+restic backup --tag files {{ salt.pillar.get('restic:files') }}
+{% if salt.pillar.get('restic:mysql', False) -%}
+mysqldump --all-databases | restic backup --stdin --stdin-filename /all_databases.sql --tag mysql
+{% endif -%}
+restic forget --keep-last 4 --tag mysql --prune
+{% if salt.pillar.get('restic:mysql', False) -%}
+restic forget --keep-last 4 --tag files --prune
+{% endif -%}

top.sls

@@ -3,6 +3,9 @@
     - common
     - users
     - salt.minion
+{% if salt.pillar.get('restic', None) is not none %}
+    - restic.client
+{% endif %}
   '*.keiran.us':
     - net
   'vps47492.inmotionhosting.com':
@@ -12,5 +15,4 @@
     - icinga2
     - nginx
     - restic.server
-    - restic.client
     - samba