xref: /aosp_15_r20/external/cldr/tools/scripts/ansible/backup-db-playbook.yml (revision 912701f9769bb47905792267661f0baf2b85bed5)
1*912701f9SAndroid Build Coastguard Worker- hosts: backupdb
2*912701f9SAndroid Build Coastguard Worker  become: yes
3*912701f9SAndroid Build Coastguard Worker  vars_files:
4*912701f9SAndroid Build Coastguard Worker    # variables are used in templates
5*912701f9SAndroid Build Coastguard Worker    - vars/main.yml
6*912701f9SAndroid Build Coastguard Worker    - local-vars/local.yml
7*912701f9SAndroid Build Coastguard Worker  tasks:
8*912701f9SAndroid Build Coastguard Worker    - name: ensure cldrbackup group is there
9*912701f9SAndroid Build Coastguard Worker      group:
10*912701f9SAndroid Build Coastguard Worker        name: cldrbackup
11*912701f9SAndroid Build Coastguard Worker        state: present
12*912701f9SAndroid Build Coastguard Worker    - name: ensure cldrbackup user is there
13*912701f9SAndroid Build Coastguard Worker      user:
14*912701f9SAndroid Build Coastguard Worker        name: cldrbackup
15*912701f9SAndroid Build Coastguard Worker        groups:
16*912701f9SAndroid Build Coastguard Worker          - cldrbackup
17*912701f9SAndroid Build Coastguard Worker        append: yes # add to the groups, do not remove
18*912701f9SAndroid Build Coastguard Worker        state: present
19*912701f9SAndroid Build Coastguard Worker        create_home: true
20*912701f9SAndroid Build Coastguard Worker    - name: set up /home/cldrbackup/.my.cnf
21*912701f9SAndroid Build Coastguard Worker      no_log: true
22*912701f9SAndroid Build Coastguard Worker      template:
23*912701f9SAndroid Build Coastguard Worker        src: templates/mycnf.j2
24*912701f9SAndroid Build Coastguard Worker        dest: /home/cldrbackup/.my.cnf
25*912701f9SAndroid Build Coastguard Worker        owner: cldrbackup
26*912701f9SAndroid Build Coastguard Worker        group: cldrbackup
27*912701f9SAndroid Build Coastguard Worker        mode: '0640'
28*912701f9SAndroid Build Coastguard Worker    - name: set up /home/cldrbackup/.ssh/
29*912701f9SAndroid Build Coastguard Worker      file:
30*912701f9SAndroid Build Coastguard Worker        path: /home/cldrbackup/.ssh/
31*912701f9SAndroid Build Coastguard Worker        owner: cldrbackup
32*912701f9SAndroid Build Coastguard Worker        group: cldrbackup
33*912701f9SAndroid Build Coastguard Worker        mode: '0700'
34*912701f9SAndroid Build Coastguard Worker        state: directory
35*912701f9SAndroid Build Coastguard Worker    - name: set up /home/cldrbackup/.ssh/config
36*912701f9SAndroid Build Coastguard Worker      template:
37*912701f9SAndroid Build Coastguard Worker        src: templates/cldrbackup/config.j2
38*912701f9SAndroid Build Coastguard Worker        dest: /home/cldrbackup/.ssh/config
39*912701f9SAndroid Build Coastguard Worker        owner: cldrbackup
40*912701f9SAndroid Build Coastguard Worker        group: cldrbackup
41*912701f9SAndroid Build Coastguard Worker        mode: '0640'
42*912701f9SAndroid Build Coastguard Worker    - name: set up /home/cldrbackup/.ssh/id_rsa
43*912701f9SAndroid Build Coastguard Worker      no_log: true
44*912701f9SAndroid Build Coastguard Worker      copy:
45*912701f9SAndroid Build Coastguard Worker        src: local-vars/cldrbackup/id_rsa
46*912701f9SAndroid Build Coastguard Worker        dest: /home/cldrbackup/.ssh/id_rsa
47*912701f9SAndroid Build Coastguard Worker        owner: cldrbackup
48*912701f9SAndroid Build Coastguard Worker        group: cldrbackup
49*912701f9SAndroid Build Coastguard Worker        mode: '0600'
50*912701f9SAndroid Build Coastguard Worker    - name: set up /home/cldrbackup/.ssh/id_rsa.pub
51*912701f9SAndroid Build Coastguard Worker      copy:
52*912701f9SAndroid Build Coastguard Worker        src: local-vars/cldrbackup/id_rsa.pub
53*912701f9SAndroid Build Coastguard Worker        dest: /home/cldrbackup/.ssh/id_rsa.pub
54*912701f9SAndroid Build Coastguard Worker        owner: cldrbackup
55*912701f9SAndroid Build Coastguard Worker        group: cldrbackup
56*912701f9SAndroid Build Coastguard Worker        mode: '0640'
57*912701f9SAndroid Build Coastguard Worker    - name: set up /home/cldrbackup/.ssh/known_hosts
58*912701f9SAndroid Build Coastguard Worker      copy:
59*912701f9SAndroid Build Coastguard Worker        src: local-vars/cldrbackup/known_hosts
60*912701f9SAndroid Build Coastguard Worker        dest: /home/cldrbackup/.ssh/known_hosts
61*912701f9SAndroid Build Coastguard Worker        owner: cldrbackup
62*912701f9SAndroid Build Coastguard Worker        group: cldrbackup
63*912701f9SAndroid Build Coastguard Worker        mode: '0640'
64*912701f9SAndroid Build Coastguard Worker    - name: set up /home/cldrbackup/backup.sh
65*912701f9SAndroid Build Coastguard Worker      template:
66*912701f9SAndroid Build Coastguard Worker        src: templates/cldrbackup/backup_sh.j2
67*912701f9SAndroid Build Coastguard Worker        dest: /home/cldrbackup/backup.sh
68*912701f9SAndroid Build Coastguard Worker        owner: cldrbackup
69*912701f9SAndroid Build Coastguard Worker        group: cldrbackup
70*912701f9SAndroid Build Coastguard Worker        mode: '0640'
71*912701f9SAndroid Build Coastguard Worker    - name: set up daily db backup cron job
72*912701f9SAndroid Build Coastguard Worker      cron:
73*912701f9SAndroid Build Coastguard Worker        name: "backup db"
74*912701f9SAndroid Build Coastguard Worker        user: cldrbackup
75*912701f9SAndroid Build Coastguard Worker        minute: "53"
76*912701f9SAndroid Build Coastguard Worker        hour: "13" # 13:53 UTC = 6:53 PDT or 5:53 PST
77*912701f9SAndroid Build Coastguard Worker        job: "sh /home/cldrbackup/backup.sh >/dev/null 2>&1"
78