diff --git a/playbooks/networkid_pk_backup.yaml b/playbooks/networkid_pk_backup.yaml new file mode 100644 index 00000000..081e70f9 --- /dev/null +++ b/playbooks/networkid_pk_backup.yaml @@ -0,0 +1,41 @@ +# Standards: 0.2 +--- +- name: Backup networkid secret key + hosts: polkadot,cumulus,encointer + gather_facts: True + tasks: + - name: Find network ID directory + become: True + become_user: root + ansible.builtin.find: + paths: "{{ default_database_path }}" + file_type: directory + register: network_dir + + - name: Extract subdomain from hostname + ansible.builtin.set_fact: + subdomain: "{{ inventory_hostname.split('.')[0] }}" + + # - name: Backup secrets from servers to local storage + # become: True + # become_user: root + # ansible.builtin.copy: + # src: "{{ network_dir.files[0].path }}/network/secret_ed25519" + # dest: "/opt/backup/{{ subdomain }}_secret_ed25519" + # owner: root + # group: root + # mode: 0600 + # remote_src: True + # when: network_dir.matched > 0 + # tags: backup + + - name: Backup secrets from servers to local storage + become: True + become_user: root + ansible.builtin.fetch: + src: "{{ network_dir.files[0].path }}/network/secret_ed25519" + dest: "/opt/backup/{{ subdomain }}_secret_ed25519" + flat: yes + when: network_dir.matched > 0 + tags: backup +...