diff --git a/group_vars/all/vars.yml b/group_vars/all/vars.yml index ae9d907..3e66ca7 100644 --- a/group_vars/all/vars.yml +++ b/group_vars/all/vars.yml @@ -9,6 +9,7 @@ ansible_become_pass: "{{ zocker_password }}" update_scripts_directory: "/root/update" +backup_gpg_fingerprint: "73D09948B2392D688A45DC8393E1BD26F6B02FB7" backups_directory: "/backups" backups_databases_directory: "{{ backups_directory }}/databases" backups_files_directory: "{{ backups_directory }}/files" diff --git a/roles/common/templates/backup_database.sh b/roles/common/templates/backup_database.sh index c15c0ef..5aaa93a 100644 --- a/roles/common/templates/backup_database.sh +++ b/roles/common/templates/backup_database.sh @@ -4,6 +4,6 @@ set -e; file={{ backups_databases_directory | quote }}"/$1.sql.gpg"; -mysqldump --opt --databases "$1" | buffer -m 128M -s 128K | gpg --quiet --no-verbose --encrypt --recipient 73D09948B2392D688A45DC8393E1BD26F6B02FB7 --trust-model always > "$file"; +mysqldump --opt --databases "$1" | buffer -m 128M -s 128K | gpg --quiet --no-verbose --encrypt --recipient {{ backup_gpg_fingerprint | quote }} --trust-model always > "$file"; chmod u+r-wx,g+r-wx,o+r-wx "$file"; {{ global_helper_directory | quote }}/backup_rename.sh "$file"; diff --git a/roles/common/templates/backup_files.sh b/roles/common/templates/backup_files.sh index 88ed597..9dacdfa 100644 --- a/roles/common/templates/backup_files.sh +++ b/roles/common/templates/backup_files.sh @@ -12,6 +12,6 @@ base="$(basename "$path")"; dest={{ backups_files_directory | quote }}"/$name.tar.gpg"; # Execution -tar -C "$dir" -cf - "$base" | buffer -m 128M -s 128K | gpg --quiet --no-verbose --encrypt --recipient 73D09948B2392D688A45DC8393E1BD26F6B02FB7 --trust-model always > "$dest"; +tar -C "$dir" -cf - "$base" | buffer -m 128M -s 128K | gpg --quiet --no-verbose --encrypt --recipient {{ backup_gpg_fingerprint | quote }} --trust-model always > "$dest"; chmod u+r-wx,g+r-wx,o+r-wx "$dest"; {{ global_helper_directory | quote }}/backup_rename.sh "$dest";