ansible-edda/inventory/group_vars/restic/vars.yml

---
# --------------------------------------------------------------------------------------------------
# backups:restic
# --------------------------------------------------------------------------------------------------
backups_restic_user_aws_access_key_id: "{{ vault_backups_restic_user_aws_access_key_id }}"
backups_restic_user_aws_secret_access_key: "\
  {{ vault_backups_restic_user_aws_secret_access_key }}"
backups_restic_user_aws_keys_file: "{{ system_etc_root_directory }}/restic-aws-keys.yml"
backups_restic_user_aws_bucket_endpoint: "\
  {{ vault_backups_restic_user_aws_bucket_endpoint }}"
backups_restic_user_restic_password: "{{ vault_backups_restic_user_restic_password }}"
backups_restic_user_restic_password_file: "{{ system_etc_root_directory }}/restic.password"
backups_restic_user_restic_keep_daily: 30
backups_restic_user_restic_keep_monthly: 3

# --------------------------------------------------------------------------------------------------
# services:backups
# --------------------------------------------------------------------------------------------------
services_backups_restic_services: "\
  {% set services_backups_restic_service = {} %}\
  {% for service in services_host_services.keys() %}\
  {{ services_backups_restic_service.update(
       { service: {
            'user_name': ( 'pod-' ~ service ),
            'data_directory': ( services_data_directory ~ '/pod-' ~ service ),
            'exclude': ( services_host_services[service].restic_exclude | default([]) ),
            'aws_bucket_prefix': ( 'the-nine-worlds---pod-' ~ service ),
       }}
  ) }}\
  {% if services_data_dataset is defined %}\
  {{ services_backups_restic_service[service].update(
       { 'data_dataset': ( services_data_dataset ~ '/pod-' ~ service ) }
  ) }}\
  {% endif %}\
  {% endfor %}\
  {{ services_backups_restic_service }}"