Add node001

playbooks/serguzim.net.yml

@@ -10,7 +10,14 @@
         apply:
           tags: software
       tags: software
-      when: "inventory_hostname == 'node003'"
+      when: "inventory_hostname != 'node002'"
+
+    - name: Run always role
+      ansible.builtin.include_role:
+        name: always
+        apply:
+          tags: always
+      tags: always
 
     - name: Include service roles
       ansible.builtin.include_role:

playbooks/unlock-backup.yml

@@ -0,0 +1,9 @@
+---
+- name: Unlock backups
+  hosts: serguzim_net
+  become: true
+  tasks:
+  - name: Change password
+    ansible.builtin.shell:
+      cmd: autorestic unlock --force && autorestic exec -va unlock
+      chdir: "{{ (services_path, 'backup') | path_join }}"