common: Added support for backup databases

roles/common/files/backup_rename.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+set -e;
+
+dir=$(dirname "$1");
+date=$(date +%Y-%m-%d-%H-%M);
+name=$(basename "$1");
+
+mv "$1" "$dir/$date-$name";

roles/common/tasks/helpers.yml

@@ -16,4 +16,15 @@
     group: root
     mode: "u=rwx,g=rx,o=rx"
   loop:
+    - backup_rename.sh
     - gpg_import_url_key.sh
+
+- name: Build and upload template helper scripts
+  template:
+    src: "{{ item }}"
+    dest: "{{ global_helper_directory }}/{{ item }}"
+    owner: root
+    group: root
+    mode: "u=rwx,g=rx,o=rx"
+  loop:
+    - backup_database.sh

roles/common/tasks/main.yml

@@ -39,3 +39,14 @@
     owner: root
     group: root
     mode: "u=rwx,g=rx"
+
+- name: Create backups directories
+  file:
+    path: "{{ item }}"
+    state: directory
+    owner: root
+    group: root
+    mode: "u=rwx,g=rx,o=rx"
+  loop:
+    - "{{ backups_directory }}"
+    - "{{ backups_databases_directory }}"

roles/common/tasks/packages.yml

@@ -5,6 +5,7 @@
     name:
       - acl
       - apt-transport-https
+      - buffer
       - ca-certificates
       - cron
       - curl

roles/common/templates/backup_database.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+set -e
+
+file={{ backups_databases_directory | quote }}"/$1.sql.gpg";
+
+mysqldump --opt --databases "$1" | buffer -m 128M -s 128K | gpg --quiet --no-verbose --encrypt --recipient 73D09948B2392D688A45DC8393E1BD26F6B02FB7 --trust-model always > "$file";
+chmod u+r-wx,g+r-wx,o+r-wx "$file";
+{{ global_helper_directory | quote }}/backup_rename.sh "$file";