add restic env, firewall

users/files/bashrc.jinja

@@ -73,7 +73,14 @@ if [ $(id -u) -gt 0 ]; then
     alias fab='sudo fab'
 fi
 
+if test -d ~/.local/bin; then
+  PATH="${PATH}:~/.local/bin"
+fi
+
 alias random='< /dev/urandom tr -dc A-Za-z0-9 | head -c${1:-32};echo'
 
-# https://git.keiran.us/config-mgmt/puppet/raw/commit/09158fc579f5ee2c00f395971d8c986e3ec08788/modules/keir/files/bash/bashrc
+{% if bashrc_user is defined and bashrc_user == 'root' and 'restic' in pillar %}
+export RESTIC_REPOSITORY={{ salt.pillar.get('restic:repo') }}
+export RESTIC_PASSWORD={{ salt.pillar.get('restic:pass') }}
+{% endif %}